shield Security update for curl

SUSE-SLE-Module-Basesystem-15-SP7-2026-4048

This update for curl fixes the following issues: - CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass (bsc#1277476). - CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free (bsc#1277479). - CVE-2026-80230: OpenSSL pinning bypass can allow unauthenticated connections to succeed (bsc#1277480).

• Release Date
  Sep 7 2026
• References
  Bugzilla: 1277476, 1277479, 1277480
  CVEs: CVE-2026-13608, CVE-2026-80229, CVE-2026-80230
• Type
  security
• Severity
  low

cloud_download Downloads

Basesystem Module 15.7 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-150700.7.26.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.14.1-150700.7.26.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150700.7.26.1 lock rpm

Basesystem Module 15.7 aarch64

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-150700.7.26.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.14.1-150700.7.26.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150700.7.26.1 lock rpm

Basesystem Module 15.7 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-150700.7.26.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.14.1-150700.7.26.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150700.7.26.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-150700.7.26.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.14.1-150700.7.26.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150700.7.26.1 lock rpm

  libcurl4-32bit
  Library for transferring data from URLs

  8.14.1-150700.7.26.1 lock rpm