gpp_maybe Security update for curl

SUSE-SLE-Module-Basesystem-15-SP7-2026-903

This update for curl fixes the following issues: - CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). - CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). - CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259364). - CVE-2026-3805: use after free in SMB connection reuse (bsc#1259365).

• Release Date
  Mar 17 2026
• References
  Bugzilla: 1259362, 1259363, 1259364, 1259365
  CVEs: CVE-2026-1965, CVE-2026-3783, CVE-2026-3784, CVE-2026-3805
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 aarch64

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-150700.7.14.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.14.1-150700.7.14.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150700.7.14.1 lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-150700.7.14.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.14.1-150700.7.14.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150700.7.14.1 lock rpm

Basesystem Module 15.7 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-150700.7.14.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.14.1-150700.7.14.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150700.7.14.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-150700.7.14.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.14.1-150700.7.14.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150700.7.14.1 lock rpm

  libcurl4-32bit
  Library for transferring data from URLs

  8.14.1-150700.7.14.1 lock rpm