shield Security update for curl

SUSE-SLES-16.0-938

This update for curl fixes the following issues: - CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631). - CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632). - CVE-2026-6253: proxy credentials leak over redirect-to proxy (bsc#1262635). - CVE-2026-6276: stale custom cookie host causes cookie leak (bsc#1262636). - CVE-2026-6429: netrc credential leak with reused proxy connection (bsc#1262638).

• Release Date
  Jun 17 2026
• References
  Bugzilla: 1262631, 1262632, 1262635, 1262636, 1262638
  CVEs: CVE-2026-4873, CVE-2026-5545, CVE-2026-6253, CVE-2026-6276, CVE-2026-6429
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-160000.6.1 lock rpm

  curl-zsh-completion
  Zsh Completion for curl

  8.14.1-160000.6.1 lock rpm

  libcurl-devel
  Development files for the curl library

  8.14.1-160000.6.1 lock rpm

  libcurl-devel-doc
  Manual pages for libcurl

  8.14.1-160000.6.1 lock rpm

  libcurl-mini4
  Library for transferring data from URLs

  8.14.1-160000.6.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-160000.6.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-160000.6.1 lock rpm

  curl-zsh-completion
  Zsh Completion for curl

  8.14.1-160000.6.1 lock rpm

  libcurl-devel
  Development files for the curl library

  8.14.1-160000.6.1 lock rpm

  libcurl-devel-doc
  Manual pages for libcurl

  8.14.1-160000.6.1 lock rpm

  libcurl-mini4
  Library for transferring data from URLs

  8.14.1-160000.6.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-160000.6.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-160000.6.1 lock rpm

  curl-zsh-completion
  Zsh Completion for curl

  8.14.1-160000.6.1 lock rpm

  libcurl-devel
  Development files for the curl library

  8.14.1-160000.6.1 lock rpm

  libcurl-devel-doc
  Manual pages for libcurl

  8.14.1-160000.6.1 lock rpm

  libcurl-mini4
  Library for transferring data from URLs

  8.14.1-160000.6.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-160000.6.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-160000.6.1 lock rpm

  curl-zsh-completion
  Zsh Completion for curl

  8.14.1-160000.6.1 lock rpm

  libcurl-devel
  Development files for the curl library

  8.14.1-160000.6.1 lock rpm

  libcurl-devel-doc
  Manual pages for libcurl

  8.14.1-160000.6.1 lock rpm

  libcurl-mini4
  Library for transferring data from URLs

  8.14.1-160000.6.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-160000.6.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-160000.6.1 lock rpm

  curl-zsh-completion
  Zsh Completion for curl

  8.14.1-160000.6.1 lock rpm

  libcurl-devel
  Development files for the curl library

  8.14.1-160000.6.1 lock rpm

  libcurl-devel-doc
  Manual pages for libcurl

  8.14.1-160000.6.1 lock rpm

  libcurl-mini4
  Library for transferring data from URLs

  8.14.1-160000.6.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-160000.6.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-160000.6.1 lock rpm

  curl-zsh-completion
  Zsh Completion for curl

  8.14.1-160000.6.1 lock rpm

  libcurl-devel
  Development files for the curl library

  8.14.1-160000.6.1 lock rpm

  libcurl-devel-doc
  Manual pages for libcurl

  8.14.1-160000.6.1 lock rpm

  libcurl-mini4
  Library for transferring data from URLs

  8.14.1-160000.6.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-160000.6.1 lock rpm