Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-6253 (GCVE-0-2026-6253)
Vulnerability from cvelistv5 – Published: 2026-05-13 08:28 – Updated: 2026-05-13 17:42
VLAI
EPSS
VEX
Title
proxy credentials leak over redirect-to proxy
Summary
curl might erroneously pass on credentials for a first proxy to a second
proxy.
This can happen when the following conditions are true:
1. curl is setup to use specific different proxies for different URL schemes
2. the first proxy needs credentials
3. the second proxy uses no credentials
4. while using the first proxy (using say `http://`), curl is asked to follow
a redirect to a URL using another scheme (say `https://`), accessed using a
second, different, proxy
Severity
5.9 (Medium)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-05-13 17:42 UTC
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| curl | curl |
Affected:
8.19.0 , ≤ 8.19.0
(semver)
Affected: 8.18.0 , ≤ 8.18.0 (semver) Affected: 8.17.0 , ≤ 8.17.0 (semver) Affected: 8.16.0 , ≤ 8.16.0 (semver) Affected: 8.15.0 , ≤ 8.15.0 (semver) Affected: 8.14.1 , ≤ 8.14.1 (semver) Affected: 8.14.0 , ≤ 8.14.0 (semver) Affected: 8.13.0 , ≤ 8.13.0 (semver) Affected: 8.12.1 , ≤ 8.12.1 (semver) Affected: 8.12.0 , ≤ 8.12.0 (semver) Affected: 8.11.1 , ≤ 8.11.1 (semver) Affected: 8.11.0 , ≤ 8.11.0 (semver) Affected: 8.10.1 , ≤ 8.10.1 (semver) Affected: 8.10.0 , ≤ 8.10.0 (semver) Affected: 8.9.1 , ≤ 8.9.1 (semver) Affected: 8.9.0 , ≤ 8.9.0 (semver) Affected: 8.8.0 , ≤ 8.8.0 (semver) Affected: 8.7.1 , ≤ 8.7.1 (semver) Affected: 8.7.0 , ≤ 8.7.0 (semver) Affected: 8.6.0 , ≤ 8.6.0 (semver) Affected: 8.5.0 , ≤ 8.5.0 (semver) Affected: 8.4.0 , ≤ 8.4.0 (semver) Affected: 8.3.0 , ≤ 8.3.0 (semver) Affected: 8.2.1 , ≤ 8.2.1 (semver) Affected: 8.2.0 , ≤ 8.2.0 (semver) Affected: 8.1.2 , ≤ 8.1.2 (semver) Affected: 8.1.1 , ≤ 8.1.1 (semver) Affected: 8.1.0 , ≤ 8.1.0 (semver) Affected: 8.0.1 , ≤ 8.0.1 (semver) Affected: 8.0.0 , ≤ 8.0.0 (semver) Affected: 7.88.1 , ≤ 7.88.1 (semver) Affected: 7.88.0 , ≤ 7.88.0 (semver) Affected: 7.87.0 , ≤ 7.87.0 (semver) Affected: 7.86.0 , ≤ 7.86.0 (semver) Affected: 7.85.0 , ≤ 7.85.0 (semver) Affected: 7.84.0 , ≤ 7.84.0 (semver) Affected: 7.83.1 , ≤ 7.83.1 (semver) Affected: 7.83.0 , ≤ 7.83.0 (semver) Affected: 7.82.0 , ≤ 7.82.0 (semver) Affected: 7.81.0 , ≤ 7.81.0 (semver) Affected: 7.80.0 , ≤ 7.80.0 (semver) Affected: 7.79.1 , ≤ 7.79.1 (semver) Affected: 7.79.0 , ≤ 7.79.0 (semver) Affected: 7.78.0 , ≤ 7.78.0 (semver) Affected: 7.77.0 , ≤ 7.77.0 (semver) Affected: 7.76.1 , ≤ 7.76.1 (semver) Affected: 7.76.0 , ≤ 7.76.0 (semver) Affected: 7.75.0 , ≤ 7.75.0 (semver) Affected: 7.74.0 , ≤ 7.74.0 (semver) Affected: 7.73.0 , ≤ 7.73.0 (semver) Affected: 7.72.0 , ≤ 7.72.0 (semver) Affected: 7.71.1 , ≤ 7.71.1 (semver) Affected: 7.71.0 , ≤ 7.71.0 (semver) Affected: 7.70.0 , ≤ 7.70.0 (semver) Affected: 7.69.1 , ≤ 7.69.1 (semver) Affected: 7.69.0 , ≤ 7.69.0 (semver) Affected: 7.68.0 , ≤ 7.68.0 (semver) Affected: 7.67.0 , ≤ 7.67.0 (semver) Affected: 7.66.0 , ≤ 7.66.0 (semver) Affected: 7.65.3 , ≤ 7.65.3 (semver) Affected: 7.65.2 , ≤ 7.65.2 (semver) Affected: 7.65.1 , ≤ 7.65.1 (semver) Affected: 7.65.0 , ≤ 7.65.0 (semver) Affected: 7.64.1 , ≤ 7.64.1 (semver) Affected: 7.64.0 , ≤ 7.64.0 (semver) Affected: 7.63.0 , ≤ 7.63.0 (semver) Affected: 7.62.0 , ≤ 7.62.0 (semver) Affected: 7.61.1 , ≤ 7.61.1 (semver) Affected: 7.61.0 , ≤ 7.61.0 (semver) Affected: 7.60.0 , ≤ 7.60.0 (semver) Affected: 7.59.0 , ≤ 7.59.0 (semver) Affected: 7.58.0 , ≤ 7.58.0 (semver) Affected: 7.57.0 , ≤ 7.57.0 (semver) Affected: 7.56.1 , ≤ 7.56.1 (semver) Affected: 7.56.0 , ≤ 7.56.0 (semver) Affected: 7.55.1 , ≤ 7.55.1 (semver) Affected: 7.55.0 , ≤ 7.55.0 (semver) Affected: 7.54.1 , ≤ 7.54.1 (semver) Affected: 7.54.0 , ≤ 7.54.0 (semver) Affected: 7.53.1 , ≤ 7.53.1 (semver) Affected: 7.53.0 , ≤ 7.53.0 (semver) Affected: 7.52.1 , ≤ 7.52.1 (semver) Affected: 7.52.0 , ≤ 7.52.0 (semver) Affected: 7.51.0 , ≤ 7.51.0 (semver) Affected: 7.50.3 , ≤ 7.50.3 (semver) Affected: 7.50.2 , ≤ 7.50.2 (semver) Affected: 7.50.1 , ≤ 7.50.1 (semver) Affected: 7.50.0 , ≤ 7.50.0 (semver) Affected: 7.49.1 , ≤ 7.49.1 (semver) Affected: 7.49.0 , ≤ 7.49.0 (semver) Affected: 7.48.0 , ≤ 7.48.0 (semver) Affected: 7.47.1 , ≤ 7.47.1 (semver) Affected: 7.47.0 , ≤ 7.47.0 (semver) Affected: 7.46.0 , ≤ 7.46.0 (semver) Affected: 7.45.0 , ≤ 7.45.0 (semver) Affected: 7.44.0 , ≤ 7.44.0 (semver) Affected: 7.43.0 , ≤ 7.43.0 (semver) Affected: 7.42.1 , ≤ 7.42.1 (semver) Affected: 7.42.0 , ≤ 7.42.0 (semver) Affected: 7.41.0 , ≤ 7.41.0 (semver) Affected: 7.40.0 , ≤ 7.40.0 (semver) Affected: 7.39.0 , ≤ 7.39.0 (semver) Affected: 7.38.0 , ≤ 7.38.0 (semver) Affected: 7.37.1 , ≤ 7.37.1 (semver) Affected: 7.37.0 , ≤ 7.37.0 (semver) Affected: 7.36.0 , ≤ 7.36.0 (semver) Affected: 7.35.0 , ≤ 7.35.0 (semver) Affected: 7.34.0 , ≤ 7.34.0 (semver) Affected: 7.33.0 , ≤ 7.33.0 (semver) Affected: 7.32.0 , ≤ 7.32.0 (semver) Affected: 7.31.0 , ≤ 7.31.0 (semver) Affected: 7.30.0 , ≤ 7.30.0 (semver) Affected: 7.29.0 , ≤ 7.29.0 (semver) Affected: 7.28.1 , ≤ 7.28.1 (semver) Affected: 7.28.0 , ≤ 7.28.0 (semver) Affected: 7.27.0 , ≤ 7.27.0 (semver) Affected: 7.26.0 , ≤ 7.26.0 (semver) Affected: 7.25.0 , ≤ 7.25.0 (semver) Affected: 7.24.0 , ≤ 7.24.0 (semver) Affected: 7.23.1 , ≤ 7.23.1 (semver) Affected: 7.23.0 , ≤ 7.23.0 (semver) Affected: 7.22.0 , ≤ 7.22.0 (semver) Affected: 7.21.7 , ≤ 7.21.7 (semver) Affected: 7.21.6 , ≤ 7.21.6 (semver) Affected: 7.21.5 , ≤ 7.21.5 (semver) Affected: 7.21.4 , ≤ 7.21.4 (semver) Affected: 7.21.3 , ≤ 7.21.3 (semver) Affected: 7.21.2 , ≤ 7.21.2 (semver) Affected: 7.21.1 , ≤ 7.21.1 (semver) Affected: 7.21.0 , ≤ 7.21.0 (semver) Affected: 7.20.1 , ≤ 7.20.1 (semver) Affected: 7.20.0 , ≤ 7.20.0 (semver) Affected: 7.19.7 , ≤ 7.19.7 (semver) Affected: 7.19.6 , ≤ 7.19.6 (semver) Affected: 7.19.5 , ≤ 7.19.5 (semver) Affected: 7.19.4 , ≤ 7.19.4 (semver) Affected: 7.19.3 , ≤ 7.19.3 (semver) Affected: 7.19.2 , ≤ 7.19.2 (semver) Affected: 7.19.1 , ≤ 7.19.1 (semver) Affected: 7.19.0 , ≤ 7.19.0 (semver) Affected: 7.18.2 , ≤ 7.18.2 (semver) Affected: 7.18.1 , ≤ 7.18.1 (semver) Affected: 7.18.0 , ≤ 7.18.0 (semver) Affected: 7.17.1 , ≤ 7.17.1 (semver) Affected: 7.17.0 , ≤ 7.17.0 (semver) Affected: 7.16.4 , ≤ 7.16.4 (semver) Affected: 7.16.3 , ≤ 7.16.3 (semver) Affected: 7.16.2 , ≤ 7.16.2 (semver) Affected: 7.16.1 , ≤ 7.16.1 (semver) Affected: 7.16.0 , ≤ 7.16.0 (semver) Affected: 7.15.5 , ≤ 7.15.5 (semver) Affected: 7.15.4 , ≤ 7.15.4 (semver) Affected: 7.15.3 , ≤ 7.15.3 (semver) Affected: 7.15.2 , ≤ 7.15.2 (semver) Affected: 7.15.1 , ≤ 7.15.1 (semver) Affected: 7.15.0 , ≤ 7.15.0 (semver) Affected: 7.14.1 , ≤ 7.14.1 (semver) |
guessed |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2026-05-13T09:05:31.000Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "http://www.openwall.com/lists/oss-security/2026/04/29/11"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-6253",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-13T17:42:30.813126Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-05-13T17:42:40.102Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://hackerone.com/reports/3669637"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "curl",
"vendor": "curl",
"versions": [
{
"lessThanOrEqual": "8.19.0",
"status": "affected",
"version": "8.19.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.18.0",
"status": "affected",
"version": "8.18.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.17.0",
"status": "affected",
"version": "8.17.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.16.0",
"status": "affected",
"version": "8.16.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.15.0",
"status": "affected",
"version": "8.15.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.14.1",
"status": "affected",
"version": "8.14.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.14.0",
"status": "affected",
"version": "8.14.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.13.0",
"status": "affected",
"version": "8.13.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.12.1",
"status": "affected",
"version": "8.12.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.12.0",
"status": "affected",
"version": "8.12.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.11.1",
"status": "affected",
"version": "8.11.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.11.0",
"status": "affected",
"version": "8.11.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.10.1",
"status": "affected",
"version": "8.10.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.10.0",
"status": "affected",
"version": "8.10.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.9.1",
"status": "affected",
"version": "8.9.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.9.0",
"status": "affected",
"version": "8.9.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.8.0",
"status": "affected",
"version": "8.8.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.7.1",
"status": "affected",
"version": "8.7.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.7.0",
"status": "affected",
"version": "8.7.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.6.0",
"status": "affected",
"version": "8.6.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.5.0",
"status": "affected",
"version": "8.5.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.4.0",
"status": "affected",
"version": "8.4.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.3.0",
"status": "affected",
"version": "8.3.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.2.1",
"status": "affected",
"version": "8.2.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.2.0",
"status": "affected",
"version": "8.2.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.1.2",
"status": "affected",
"version": "8.1.2",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.1.1",
"status": "affected",
"version": "8.1.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.1.0",
"status": "affected",
"version": "8.1.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.0.1",
"status": "affected",
"version": "8.0.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.0.0",
"status": "affected",
"version": "8.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.88.1",
"status": "affected",
"version": "7.88.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.88.0",
"status": "affected",
"version": "7.88.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.87.0",
"status": "affected",
"version": "7.87.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.86.0",
"status": "affected",
"version": "7.86.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.85.0",
"status": "affected",
"version": "7.85.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.84.0",
"status": "affected",
"version": "7.84.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.83.1",
"status": "affected",
"version": "7.83.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.83.0",
"status": "affected",
"version": "7.83.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.82.0",
"status": "affected",
"version": "7.82.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.81.0",
"status": "affected",
"version": "7.81.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.80.0",
"status": "affected",
"version": "7.80.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.79.1",
"status": "affected",
"version": "7.79.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.79.0",
"status": "affected",
"version": "7.79.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.78.0",
"status": "affected",
"version": "7.78.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.77.0",
"status": "affected",
"version": "7.77.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.76.1",
"status": "affected",
"version": "7.76.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.76.0",
"status": "affected",
"version": "7.76.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.75.0",
"status": "affected",
"version": "7.75.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.74.0",
"status": "affected",
"version": "7.74.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.73.0",
"status": "affected",
"version": "7.73.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.72.0",
"status": "affected",
"version": "7.72.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.71.1",
"status": "affected",
"version": "7.71.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.71.0",
"status": "affected",
"version": "7.71.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.70.0",
"status": "affected",
"version": "7.70.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.69.1",
"status": "affected",
"version": "7.69.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.69.0",
"status": "affected",
"version": "7.69.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.68.0",
"status": "affected",
"version": "7.68.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.67.0",
"status": "affected",
"version": "7.67.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.66.0",
"status": "affected",
"version": "7.66.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.65.3",
"status": "affected",
"version": "7.65.3",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.65.2",
"status": "affected",
"version": "7.65.2",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.65.1",
"status": "affected",
"version": "7.65.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.65.0",
"status": "affected",
"version": "7.65.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.64.1",
"status": "affected",
"version": "7.64.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.64.0",
"status": "affected",
"version": "7.64.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.63.0",
"status": "affected",
"version": "7.63.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.62.0",
"status": "affected",
"version": "7.62.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.61.1",
"status": "affected",
"version": "7.61.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.61.0",
"status": "affected",
"version": "7.61.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.60.0",
"status": "affected",
"version": "7.60.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.59.0",
"status": "affected",
"version": "7.59.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.58.0",
"status": "affected",
"version": "7.58.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.57.0",
"status": "affected",
"version": "7.57.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.56.1",
"status": "affected",
"version": "7.56.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.56.0",
"status": "affected",
"version": "7.56.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.55.1",
"status": "affected",
"version": "7.55.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.55.0",
"status": "affected",
"version": "7.55.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.54.1",
"status": "affected",
"version": "7.54.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.54.0",
"status": "affected",
"version": "7.54.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.53.1",
"status": "affected",
"version": "7.53.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.53.0",
"status": "affected",
"version": "7.53.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.52.1",
"status": "affected",
"version": "7.52.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.52.0",
"status": "affected",
"version": "7.52.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.51.0",
"status": "affected",
"version": "7.51.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.50.3",
"status": "affected",
"version": "7.50.3",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.50.2",
"status": "affected",
"version": "7.50.2",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.50.1",
"status": "affected",
"version": "7.50.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.50.0",
"status": "affected",
"version": "7.50.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.49.1",
"status": "affected",
"version": "7.49.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.49.0",
"status": "affected",
"version": "7.49.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.48.0",
"status": "affected",
"version": "7.48.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.47.1",
"status": "affected",
"version": "7.47.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.47.0",
"status": "affected",
"version": "7.47.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.46.0",
"status": "affected",
"version": "7.46.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.45.0",
"status": "affected",
"version": "7.45.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.44.0",
"status": "affected",
"version": "7.44.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.43.0",
"status": "affected",
"version": "7.43.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.42.1",
"status": "affected",
"version": "7.42.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.42.0",
"status": "affected",
"version": "7.42.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.41.0",
"status": "affected",
"version": "7.41.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.40.0",
"status": "affected",
"version": "7.40.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.39.0",
"status": "affected",
"version": "7.39.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.38.0",
"status": "affected",
"version": "7.38.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.37.1",
"status": "affected",
"version": "7.37.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.37.0",
"status": "affected",
"version": "7.37.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.36.0",
"status": "affected",
"version": "7.36.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.35.0",
"status": "affected",
"version": "7.35.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.34.0",
"status": "affected",
"version": "7.34.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.33.0",
"status": "affected",
"version": "7.33.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.32.0",
"status": "affected",
"version": "7.32.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.31.0",
"status": "affected",
"version": "7.31.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.30.0",
"status": "affected",
"version": "7.30.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.29.0",
"status": "affected",
"version": "7.29.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.28.1",
"status": "affected",
"version": "7.28.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.28.0",
"status": "affected",
"version": "7.28.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.27.0",
"status": "affected",
"version": "7.27.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.26.0",
"status": "affected",
"version": "7.26.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.25.0",
"status": "affected",
"version": "7.25.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.24.0",
"status": "affected",
"version": "7.24.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.23.1",
"status": "affected",
"version": "7.23.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.23.0",
"status": "affected",
"version": "7.23.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.22.0",
"status": "affected",
"version": "7.22.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.21.7",
"status": "affected",
"version": "7.21.7",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.21.6",
"status": "affected",
"version": "7.21.6",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.21.5",
"status": "affected",
"version": "7.21.5",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.21.4",
"status": "affected",
"version": "7.21.4",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.21.3",
"status": "affected",
"version": "7.21.3",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.21.2",
"status": "affected",
"version": "7.21.2",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.21.1",
"status": "affected",
"version": "7.21.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.21.0",
"status": "affected",
"version": "7.21.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.20.1",
"status": "affected",
"version": "7.20.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.20.0",
"status": "affected",
"version": "7.20.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.19.7",
"status": "affected",
"version": "7.19.7",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.19.6",
"status": "affected",
"version": "7.19.6",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.19.5",
"status": "affected",
"version": "7.19.5",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.19.4",
"status": "affected",
"version": "7.19.4",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.19.3",
"status": "affected",
"version": "7.19.3",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.19.2",
"status": "affected",
"version": "7.19.2",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.19.1",
"status": "affected",
"version": "7.19.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.19.0",
"status": "affected",
"version": "7.19.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.18.2",
"status": "affected",
"version": "7.18.2",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.18.1",
"status": "affected",
"version": "7.18.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.18.0",
"status": "affected",
"version": "7.18.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.17.1",
"status": "affected",
"version": "7.17.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.17.0",
"status": "affected",
"version": "7.17.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.16.4",
"status": "affected",
"version": "7.16.4",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.16.3",
"status": "affected",
"version": "7.16.3",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.16.2",
"status": "affected",
"version": "7.16.2",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.16.1",
"status": "affected",
"version": "7.16.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.16.0",
"status": "affected",
"version": "7.16.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.15.5",
"status": "affected",
"version": "7.15.5",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.15.4",
"status": "affected",
"version": "7.15.4",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.15.3",
"status": "affected",
"version": "7.15.3",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.15.2",
"status": "affected",
"version": "7.15.2",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.15.1",
"status": "affected",
"version": "7.15.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.15.0",
"status": "affected",
"version": "7.15.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.14.1",
"status": "affected",
"version": "7.14.1",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Dwij Mehta (O2 Lab"
},
{
"lang": "en",
"type": "finder",
"value": "Texas A\u0026M University)"
},
{
"lang": "en",
"type": "remediation developer",
"value": "Daniel Stenberg"
}
],
"descriptions": [
{
"lang": "en",
"value": "curl might erroneously pass on credentials for a first proxy to a second\nproxy.\n\nThis can happen when the following conditions are true:\n\n1. curl is setup to use specific different proxies for different URL schemes\n2. the first proxy needs credentials\n3. the second proxy uses no credentials\n4. while using the first proxy (using say `http://`), curl is asked to follow\n a redirect to a URL using another scheme (say `https://`), accessed using a\n second, different, proxy"
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-522 Insufficiently Protected Credentials",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-13T08:28:03.004Z",
"orgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
"shortName": "curl"
},
"references": [
{
"name": "json",
"url": "https://curl.se/docs/CVE-2026-6253.json"
},
{
"name": "www",
"url": "https://curl.se/docs/CVE-2026-6253.html"
},
{
"name": "issue",
"url": "https://hackerone.com/reports/3669637"
}
],
"title": "proxy credentials leak over redirect-to proxy"
}
},
"cveMetadata": {
"assignerOrgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
"assignerShortName": "curl",
"cveId": "CVE-2026-6253",
"datePublished": "2026-05-13T08:28:03.004Z",
"dateReserved": "2026-04-13T20:11:11.991Z",
"dateUpdated": "2026-05-13T17:42:40.102Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-6253",
"date": "2026-08-26",
"epss": "0.00719",
"percentile": "0.51214"
},
"microsoft_vex": {
"current_release_date": "2026-06-15T01:40:58.000Z",
"cve": "CVE-2026-6253",
"id": "msrc_CVE-2026-6253",
"initial_release_date": "2026-05-02T00:00:00.000Z",
"product_status:fixed": "2",
"product_status:known_affected": "3",
"product_status:known_not_affected": "4",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "proxy credentials leak over redirect-to proxy",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-6253.json",
"version": "5"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-6253\",\"sourceIdentifier\":\"2499f714-1537-4658-8207-48ae4bb9eae9\",\"published\":\"2026-05-13T13:01:56.570\",\"lastModified\":\"2026-06-17T11:00:33.003\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"curl might erroneously pass on credentials for a first proxy to a second\\nproxy.\\n\\nThis can happen when the following conditions are true:\\n\\n1. curl is setup to use specific different proxies for different URL schemes\\n2. the first proxy needs credentials\\n3. the second proxy uses no credentials\\n4. while using the first proxy (using say `http://`), curl is asked to follow\\n a redirect to a URL using another scheme (say `https://`), accessed using a\\n second, different, proxy\"}],\"affected\":[{\"source\":\"2499f714-1537-4658-8207-48ae4bb9eae9\",\"affectedData\":[{\"vendor\":\"curl\",\"product\":\"curl\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"8.19.0\",\"lessThanOrEqual\":\"8.19.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.18.0\",\"lessThanOrEqual\":\"8.18.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.17.0\",\"lessThanOrEqual\":\"8.17.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.16.0\",\"lessThanOrEqual\":\"8.16.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.15.0\",\"lessThanOrEqual\":\"8.15.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.14.1\",\"lessThanOrEqual\":\"8.14.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.14.0\",\"lessThanOrEqual\":\"8.14.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.13.0\",\"lessThanOrEqual\":\"8.13.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.12.1\",\"lessThanOrEqual\":\"8.12.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.12.0\",\"lessThanOrEqual\":\"8.12.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.11.1\",\"lessThanOrEqual\":\"8.11.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.11.0\",\"lessThanOrEqual\":\"8.11.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.10.1\",\"lessThanOrEqual\":\"8.10.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.10.0\",\"lessThanOrEqual\":\"8.10.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.9.1\",\"lessThanOrEqual\":\"8.9.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.9.0\",\"lessThanOrEqual\":\"8.9.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.8.0\",\"lessThanOrEqual\":\"8.8.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.7.1\",\"lessThanOrEqual\":\"8.7.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.7.0\",\"lessThanOrEqual\":\"8.7.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.6.0\",\"lessThanOrEqual\":\"8.6.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.5.0\",\"lessThanOrEqual\":\"8.5.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.4.0\",\"lessThanOrEqual\":\"8.4.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.3.0\",\"lessThanOrEqual\":\"8.3.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.2.1\",\"lessThanOrEqual\":\"8.2.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.2.0\",\"lessThanOrEqual\":\"8.2.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.1.2\",\"lessThanOrEqual\":\"8.1.2\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.1.1\",\"lessThanOrEqual\":\"8.1.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.1.0\",\"lessThanOrEqual\":\"8.1.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.0.1\",\"lessThanOrEqual\":\"8.0.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.0.0\",\"lessThanOrEqual\":\"8.0.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.88.1\",\"lessThanOrEqual\":\"7.88.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.88.0\",\"lessThanOrEqual\":\"7.88.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.87.0\",\"lessThanOrEqual\":\"7.87.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.86.0\",\"lessThanOrEqual\":\"7.86.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.85.0\",\"lessThanOrEqual\":\"7.85.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.84.0\",\"lessThanOrEqual\":\"7.84.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.83.1\",\"lessThanOrEqual\":\"7.83.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.83.0\",\"lessThanOrEqual\":\"7.83.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.82.0\",\"lessThanOrEqual\":\"7.82.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.81.0\",\"lessThanOrEqual\":\"7.81.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.80.0\",\"lessThanOrEqual\":\"7.80.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.79.1\",\"lessThanOrEqual\":\"7.79.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.79.0\",\"lessThanOrEqual\":\"7.79.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.78.0\",\"lessThanOrEqual\":\"7.78.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.77.0\",\"lessThanOrEqual\":\"7.77.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.76.1\",\"lessThanOrEqual\":\"7.76.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.76.0\",\"lessThanOrEqual\":\"7.76.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.75.0\",\"lessThanOrEqual\":\"7.75.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.74.0\",\"lessThanOrEqual\":\"7.74.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.73.0\",\"lessThanOrEqual\":\"7.73.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.72.0\",\"lessThanOrEqual\":\"7.72.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.71.1\",\"lessThanOrEqual\":\"7.71.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.71.0\",\"lessThanOrEqual\":\"7.71.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.70.0\",\"lessThanOrEqual\":\"7.70.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.69.1\",\"lessThanOrEqual\":\"7.69.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.69.0\",\"lessThanOrEqual\":\"7.69.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.68.0\",\"lessThanOrEqual\":\"7.68.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.67.0\",\"lessThanOrEqual\":\"7.67.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.66.0\",\"lessThanOrEqual\":\"7.66.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.65.3\",\"lessThanOrEqual\":\"7.65.3\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.65.2\",\"lessThanOrEqual\":\"7.65.2\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.65.1\",\"lessThanOrEqual\":\"7.65.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.65.0\",\"lessThanOrEqual\":\"7.65.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.64.1\",\"lessThanOrEqual\":\"7.64.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.64.0\",\"lessThanOrEqual\":\"7.64.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.63.0\",\"lessThanOrEqual\":\"7.63.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.62.0\",\"lessThanOrEqual\":\"7.62.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.61.1\",\"lessThanOrEqual\":\"7.61.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.61.0\",\"lessThanOrEqual\":\"7.61.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.60.0\",\"lessThanOrEqual\":\"7.60.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.59.0\",\"lessThanOrEqual\":\"7.59.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.58.0\",\"lessThanOrEqual\":\"7.58.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.57.0\",\"lessThanOrEqual\":\"7.57.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.56.1\",\"lessThanOrEqual\":\"7.56.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.56.0\",\"lessThanOrEqual\":\"7.56.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.55.1\",\"lessThanOrEqual\":\"7.55.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.55.0\",\"lessThanOrEqual\":\"7.55.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.54.1\",\"lessThanOrEqual\":\"7.54.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.54.0\",\"lessThanOrEqual\":\"7.54.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.53.1\",\"lessThanOrEqual\":\"7.53.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.53.0\",\"lessThanOrEqual\":\"7.53.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.52.1\",\"lessThanOrEqual\":\"7.52.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.52.0\",\"lessThanOrEqual\":\"7.52.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.51.0\",\"lessThanOrEqual\":\"7.51.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.50.3\",\"lessThanOrEqual\":\"7.50.3\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.50.2\",\"lessThanOrEqual\":\"7.50.2\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.50.1\",\"lessThanOrEqual\":\"7.50.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.50.0\",\"lessThanOrEqual\":\"7.50.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.49.1\",\"lessThanOrEqual\":\"7.49.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.49.0\",\"lessThanOrEqual\":\"7.49.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.48.0\",\"lessThanOrEqual\":\"7.48.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.47.1\",\"lessThanOrEqual\":\"7.47.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.47.0\",\"lessThanOrEqual\":\"7.47.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.46.0\",\"lessThanOrEqual\":\"7.46.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.45.0\",\"lessThanOrEqual\":\"7.45.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.44.0\",\"lessThanOrEqual\":\"7.44.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.43.0\",\"lessThanOrEqual\":\"7.43.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.42.1\",\"lessThanOrEqual\":\"7.42.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.42.0\",\"lessThanOrEqual\":\"7.42.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.41.0\",\"lessThanOrEqual\":\"7.41.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.40.0\",\"lessThanOrEqual\":\"7.40.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.39.0\",\"lessThanOrEqual\":\"7.39.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.38.0\",\"lessThanOrEqual\":\"7.38.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.37.1\",\"lessThanOrEqual\":\"7.37.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.37.0\",\"lessThanOrEqual\":\"7.37.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.36.0\",\"lessThanOrEqual\":\"7.36.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.35.0\",\"lessThanOrEqual\":\"7.35.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.34.0\",\"lessThanOrEqual\":\"7.34.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.33.0\",\"lessThanOrEqual\":\"7.33.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.32.0\",\"lessThanOrEqual\":\"7.32.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.31.0\",\"lessThanOrEqual\":\"7.31.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.30.0\",\"lessThanOrEqual\":\"7.30.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.29.0\",\"lessThanOrEqual\":\"7.29.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.28.1\",\"lessThanOrEqual\":\"7.28.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.28.0\",\"lessThanOrEqual\":\"7.28.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.27.0\",\"lessThanOrEqual\":\"7.27.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.26.0\",\"lessThanOrEqual\":\"7.26.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.25.0\",\"lessThanOrEqual\":\"7.25.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.24.0\",\"lessThanOrEqual\":\"7.24.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.23.1\",\"lessThanOrEqual\":\"7.23.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.23.0\",\"lessThanOrEqual\":\"7.23.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.22.0\",\"lessThanOrEqual\":\"7.22.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.21.7\",\"lessThanOrEqual\":\"7.21.7\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.21.6\",\"lessThanOrEqual\":\"7.21.6\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.21.5\",\"lessThanOrEqual\":\"7.21.5\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.21.4\",\"lessThanOrEqual\":\"7.21.4\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.21.3\",\"lessThanOrEqual\":\"7.21.3\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.21.2\",\"lessThanOrEqual\":\"7.21.2\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.21.1\",\"lessThanOrEqual\":\"7.21.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.21.0\",\"lessThanOrEqual\":\"7.21.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.20.1\",\"lessThanOrEqual\":\"7.20.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.20.0\",\"lessThanOrEqual\":\"7.20.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.19.7\",\"lessThanOrEqual\":\"7.19.7\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.19.6\",\"lessThanOrEqual\":\"7.19.6\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.19.5\",\"lessThanOrEqual\":\"7.19.5\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.19.4\",\"lessThanOrEqual\":\"7.19.4\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.19.3\",\"lessThanOrEqual\":\"7.19.3\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.19.2\",\"lessThanOrEqual\":\"7.19.2\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.19.1\",\"lessThanOrEqual\":\"7.19.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.19.0\",\"lessThanOrEqual\":\"7.19.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.18.2\",\"lessThanOrEqual\":\"7.18.2\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.18.1\",\"lessThanOrEqual\":\"7.18.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.18.0\",\"lessThanOrEqual\":\"7.18.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.17.1\",\"lessThanOrEqual\":\"7.17.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.17.0\",\"lessThanOrEqual\":\"7.17.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.16.4\",\"lessThanOrEqual\":\"7.16.4\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.16.3\",\"lessThanOrEqual\":\"7.16.3\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.16.2\",\"lessThanOrEqual\":\"7.16.2\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.16.1\",\"lessThanOrEqual\":\"7.16.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.16.0\",\"lessThanOrEqual\":\"7.16.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.15.5\",\"lessThanOrEqual\":\"7.15.5\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.15.4\",\"lessThanOrEqual\":\"7.15.4\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.15.3\",\"lessThanOrEqual\":\"7.15.3\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.15.2\",\"lessThanOrEqual\":\"7.15.2\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.15.1\",\"lessThanOrEqual\":\"7.15.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.15.0\",\"lessThanOrEqual\":\"7.15.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.14.1\",\"lessThanOrEqual\":\"7.14.1\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-05-13T17:42:30.813126Z\",\"id\":\"CVE-2026-6253\",\"options\":[{\"exploitation\":\"poc\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-522\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.14.1\",\"versionEndExcluding\":\"8.20.0\",\"matchCriteriaId\":\"C839F5FA-8CCE-4F13-851D-E60E8EAAA08C\"}]}]}],\"references\":[{\"url\":\"https://curl.se/docs/CVE-2026-6253.html\",\"source\":\"2499f714-1537-4658-8207-48ae4bb9eae9\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://curl.se/docs/CVE-2026-6253.json\",\"source\":\"2499f714-1537-4658-8207-48ae4bb9eae9\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://hackerone.com/reports/3669637\",\"source\":\"2499f714-1537-4658-8207-48ae4bb9eae9\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2026/04/29/11\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://hackerone.com/reports/3669637\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Third Party Advisory\"]}]}}",
"redhat_vex": {
"aggregate_severity": "Moderate",
"current_release_date": "2026-08-26T18:15:08+00:00",
"cve": "CVE-2026-6253",
"id": "CVE-2026-6253",
"initial_release_date": "2026-04-29T00:00:00+00:00",
"product_status:fixed": "4",
"product_status:known_affected": "95",
"product_status:known_not_affected": "1",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6253.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://www.openwall.com/lists/oss-security/2026/04/29/11\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2026-05-13T09:05:31.000Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.9, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-6253\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-05-13T17:42:30.813126Z\"}}}], \"references\": [{\"url\": \"https://hackerone.com/reports/3669637\", \"tags\": [\"exploit\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-05-13T17:42:01.593Z\"}}], \"cna\": {\"title\": \"proxy credentials leak over redirect-to proxy\", \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Dwij Mehta (O2 Lab\"}, {\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Texas A\u0026M University)\"}, {\"lang\": \"en\", \"type\": \"remediation developer\", \"value\": \"Daniel Stenberg\"}], \"affected\": [{\"vendor\": \"curl\", \"product\": \"curl\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.19.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.19.0\"}, {\"status\": \"affected\", \"version\": \"8.18.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.18.0\"}, {\"status\": \"affected\", \"version\": \"8.17.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.17.0\"}, {\"status\": \"affected\", \"version\": \"8.16.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.16.0\"}, {\"status\": \"affected\", \"version\": \"8.15.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.15.0\"}, {\"status\": \"affected\", \"version\": \"8.14.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.14.1\"}, {\"status\": \"affected\", \"version\": \"8.14.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.14.0\"}, {\"status\": \"affected\", \"version\": \"8.13.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.13.0\"}, {\"status\": \"affected\", \"version\": \"8.12.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.12.1\"}, {\"status\": \"affected\", \"version\": \"8.12.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.12.0\"}, {\"status\": \"affected\", \"version\": \"8.11.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.11.1\"}, {\"status\": \"affected\", \"version\": \"8.11.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.11.0\"}, {\"status\": \"affected\", \"version\": \"8.10.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.10.1\"}, {\"status\": \"affected\", \"version\": \"8.10.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.10.0\"}, {\"status\": \"affected\", \"version\": \"8.9.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.9.1\"}, {\"status\": \"affected\", \"version\": \"8.9.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.9.0\"}, {\"status\": \"affected\", \"version\": \"8.8.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.8.0\"}, {\"status\": \"affected\", \"version\": \"8.7.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.7.1\"}, {\"status\": \"affected\", \"version\": \"8.7.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.7.0\"}, {\"status\": \"affected\", \"version\": \"8.6.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.6.0\"}, {\"status\": \"affected\", \"version\": \"8.5.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.5.0\"}, {\"status\": \"affected\", \"version\": \"8.4.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.4.0\"}, {\"status\": \"affected\", \"version\": \"8.3.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.3.0\"}, {\"status\": \"affected\", \"version\": \"8.2.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.2.1\"}, {\"status\": \"affected\", \"version\": \"8.2.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.2.0\"}, {\"status\": \"affected\", \"version\": \"8.1.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.1.2\"}, {\"status\": \"affected\", \"version\": \"8.1.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.1.1\"}, {\"status\": \"affected\", \"version\": \"8.1.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.1.0\"}, {\"status\": \"affected\", \"version\": \"8.0.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.0.1\"}, {\"status\": \"affected\", \"version\": \"8.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.0.0\"}, {\"status\": \"affected\", \"version\": \"7.88.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.88.1\"}, {\"status\": \"affected\", \"version\": \"7.88.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.88.0\"}, {\"status\": \"affected\", \"version\": \"7.87.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.87.0\"}, {\"status\": \"affected\", \"version\": \"7.86.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.86.0\"}, {\"status\": \"affected\", \"version\": \"7.85.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.85.0\"}, {\"status\": \"affected\", \"version\": \"7.84.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.84.0\"}, {\"status\": \"affected\", \"version\": \"7.83.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.83.1\"}, {\"status\": \"affected\", \"version\": \"7.83.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.83.0\"}, {\"status\": \"affected\", \"version\": \"7.82.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.82.0\"}, {\"status\": \"affected\", \"version\": \"7.81.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.81.0\"}, {\"status\": \"affected\", \"version\": \"7.80.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.80.0\"}, {\"status\": \"affected\", \"version\": \"7.79.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.79.1\"}, {\"status\": \"affected\", \"version\": \"7.79.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.79.0\"}, {\"status\": \"affected\", \"version\": \"7.78.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.78.0\"}, {\"status\": \"affected\", \"version\": \"7.77.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.77.0\"}, {\"status\": \"affected\", \"version\": \"7.76.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.76.1\"}, {\"status\": \"affected\", \"version\": \"7.76.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.76.0\"}, {\"status\": \"affected\", \"version\": \"7.75.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.75.0\"}, {\"status\": \"affected\", \"version\": \"7.74.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.74.0\"}, {\"status\": \"affected\", \"version\": \"7.73.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.73.0\"}, {\"status\": \"affected\", \"version\": \"7.72.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.72.0\"}, {\"status\": \"affected\", \"version\": \"7.71.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.71.1\"}, {\"status\": \"affected\", \"version\": \"7.71.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.71.0\"}, {\"status\": \"affected\", \"version\": \"7.70.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.70.0\"}, {\"status\": \"affected\", \"version\": \"7.69.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.69.1\"}, {\"status\": \"affected\", \"version\": \"7.69.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.69.0\"}, {\"status\": \"affected\", \"version\": \"7.68.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.68.0\"}, {\"status\": \"affected\", \"version\": \"7.67.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.67.0\"}, {\"status\": \"affected\", \"version\": \"7.66.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.66.0\"}, {\"status\": \"affected\", \"version\": \"7.65.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.65.3\"}, {\"status\": \"affected\", \"version\": \"7.65.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.65.2\"}, {\"status\": \"affected\", \"version\": \"7.65.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.65.1\"}, {\"status\": \"affected\", \"version\": \"7.65.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.65.0\"}, {\"status\": \"affected\", \"version\": \"7.64.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.64.1\"}, {\"status\": \"affected\", \"version\": \"7.64.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.64.0\"}, {\"status\": \"affected\", \"version\": \"7.63.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.63.0\"}, {\"status\": \"affected\", \"version\": \"7.62.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.62.0\"}, {\"status\": \"affected\", \"version\": \"7.61.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.61.1\"}, {\"status\": \"affected\", \"version\": \"7.61.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.61.0\"}, {\"status\": \"affected\", \"version\": \"7.60.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.60.0\"}, {\"status\": \"affected\", \"version\": \"7.59.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.59.0\"}, {\"status\": \"affected\", \"version\": \"7.58.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.58.0\"}, {\"status\": \"affected\", \"version\": \"7.57.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.57.0\"}, {\"status\": \"affected\", \"version\": \"7.56.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.56.1\"}, {\"status\": \"affected\", \"version\": \"7.56.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.56.0\"}, {\"status\": \"affected\", \"version\": \"7.55.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.55.1\"}, {\"status\": \"affected\", \"version\": \"7.55.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.55.0\"}, {\"status\": \"affected\", \"version\": \"7.54.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.54.1\"}, {\"status\": \"affected\", \"version\": \"7.54.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.54.0\"}, {\"status\": \"affected\", \"version\": \"7.53.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.53.1\"}, {\"status\": \"affected\", \"version\": \"7.53.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.53.0\"}, {\"status\": \"affected\", \"version\": \"7.52.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.52.1\"}, {\"status\": \"affected\", \"version\": \"7.52.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.52.0\"}, {\"status\": \"affected\", \"version\": \"7.51.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.51.0\"}, {\"status\": \"affected\", \"version\": \"7.50.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.50.3\"}, {\"status\": \"affected\", \"version\": \"7.50.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.50.2\"}, {\"status\": \"affected\", \"version\": \"7.50.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.50.1\"}, {\"status\": \"affected\", \"version\": \"7.50.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.50.0\"}, {\"status\": \"affected\", \"version\": \"7.49.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.49.1\"}, {\"status\": \"affected\", \"version\": \"7.49.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.49.0\"}, {\"status\": \"affected\", \"version\": \"7.48.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.48.0\"}, {\"status\": \"affected\", \"version\": \"7.47.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.47.1\"}, {\"status\": \"affected\", \"version\": \"7.47.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.47.0\"}, {\"status\": \"affected\", \"version\": \"7.46.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.46.0\"}, {\"status\": \"affected\", \"version\": \"7.45.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.45.0\"}, {\"status\": \"affected\", \"version\": \"7.44.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.44.0\"}, {\"status\": \"affected\", \"version\": \"7.43.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.43.0\"}, {\"status\": \"affected\", \"version\": \"7.42.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.42.1\"}, {\"status\": \"affected\", \"version\": \"7.42.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.42.0\"}, {\"status\": \"affected\", \"version\": \"7.41.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.41.0\"}, {\"status\": \"affected\", \"version\": \"7.40.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.40.0\"}, {\"status\": \"affected\", \"version\": \"7.39.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.39.0\"}, {\"status\": \"affected\", \"version\": \"7.38.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.38.0\"}, {\"status\": \"affected\", \"version\": \"7.37.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.37.1\"}, {\"status\": \"affected\", \"version\": \"7.37.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.37.0\"}, {\"status\": \"affected\", \"version\": \"7.36.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.36.0\"}, {\"status\": \"affected\", \"version\": \"7.35.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.35.0\"}, {\"status\": \"affected\", \"version\": \"7.34.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.34.0\"}, {\"status\": \"affected\", \"version\": \"7.33.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.33.0\"}, {\"status\": \"affected\", \"version\": \"7.32.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.32.0\"}, {\"status\": \"affected\", \"version\": \"7.31.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.31.0\"}, {\"status\": \"affected\", \"version\": \"7.30.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.30.0\"}, {\"status\": \"affected\", \"version\": \"7.29.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.29.0\"}, {\"status\": \"affected\", \"version\": \"7.28.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.28.1\"}, {\"status\": \"affected\", \"version\": \"7.28.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.28.0\"}, {\"status\": \"affected\", \"version\": \"7.27.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.27.0\"}, {\"status\": \"affected\", \"version\": \"7.26.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.26.0\"}, {\"status\": \"affected\", \"version\": \"7.25.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.25.0\"}, {\"status\": \"affected\", \"version\": \"7.24.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.24.0\"}, {\"status\": \"affected\", \"version\": \"7.23.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.23.1\"}, {\"status\": \"affected\", \"version\": \"7.23.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.23.0\"}, {\"status\": \"affected\", \"version\": \"7.22.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.22.0\"}, {\"status\": \"affected\", \"version\": \"7.21.7\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.21.7\"}, {\"status\": \"affected\", \"version\": \"7.21.6\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.21.6\"}, {\"status\": \"affected\", \"version\": \"7.21.5\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.21.5\"}, {\"status\": \"affected\", \"version\": \"7.21.4\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.21.4\"}, {\"status\": \"affected\", \"version\": \"7.21.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.21.3\"}, {\"status\": \"affected\", \"version\": \"7.21.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.21.2\"}, {\"status\": \"affected\", \"version\": \"7.21.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.21.1\"}, {\"status\": \"affected\", \"version\": \"7.21.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.21.0\"}, {\"status\": \"affected\", \"version\": \"7.20.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.20.1\"}, {\"status\": \"affected\", \"version\": \"7.20.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.20.0\"}, {\"status\": \"affected\", \"version\": \"7.19.7\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.19.7\"}, {\"status\": \"affected\", \"version\": \"7.19.6\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.19.6\"}, {\"status\": \"affected\", \"version\": \"7.19.5\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.19.5\"}, {\"status\": \"affected\", \"version\": \"7.19.4\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.19.4\"}, {\"status\": \"affected\", \"version\": \"7.19.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.19.3\"}, {\"status\": \"affected\", \"version\": \"7.19.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.19.2\"}, {\"status\": \"affected\", \"version\": \"7.19.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.19.1\"}, {\"status\": \"affected\", \"version\": \"7.19.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.19.0\"}, {\"status\": \"affected\", \"version\": \"7.18.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.18.2\"}, {\"status\": \"affected\", \"version\": \"7.18.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.18.1\"}, {\"status\": \"affected\", \"version\": \"7.18.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.18.0\"}, {\"status\": \"affected\", \"version\": \"7.17.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.17.1\"}, {\"status\": \"affected\", \"version\": \"7.17.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.17.0\"}, {\"status\": \"affected\", \"version\": \"7.16.4\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.16.4\"}, {\"status\": \"affected\", \"version\": \"7.16.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.16.3\"}, {\"status\": \"affected\", \"version\": \"7.16.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.16.2\"}, {\"status\": \"affected\", \"version\": \"7.16.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.16.1\"}, {\"status\": \"affected\", \"version\": \"7.16.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.16.0\"}, {\"status\": \"affected\", \"version\": \"7.15.5\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.15.5\"}, {\"status\": \"affected\", \"version\": \"7.15.4\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.15.4\"}, {\"status\": \"affected\", \"version\": \"7.15.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.15.3\"}, {\"status\": \"affected\", \"version\": \"7.15.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.15.2\"}, {\"status\": \"affected\", \"version\": \"7.15.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.15.1\"}, {\"status\": \"affected\", \"version\": \"7.15.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.15.0\"}, {\"status\": \"affected\", \"version\": \"7.14.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.14.1\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://curl.se/docs/CVE-2026-6253.json\", \"name\": \"json\"}, {\"url\": \"https://curl.se/docs/CVE-2026-6253.html\", \"name\": \"www\"}, {\"url\": \"https://hackerone.com/reports/3669637\", \"name\": \"issue\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"curl might erroneously pass on credentials for a first proxy to a second\\nproxy.\\n\\nThis can happen when the following conditions are true:\\n\\n1. curl is setup to use specific different proxies for different URL schemes\\n2. the first proxy needs credentials\\n3. the second proxy uses no credentials\\n4. while using the first proxy (using say `http://`), curl is asked to follow\\n a redirect to a URL using another scheme (say `https://`), accessed using a\\n second, different, proxy\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-522 Insufficiently Protected Credentials\"}]}], \"providerMetadata\": {\"orgId\": \"2499f714-1537-4658-8207-48ae4bb9eae9\", \"shortName\": \"curl\", \"dateUpdated\": \"2026-05-13T08:28:03.004Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-6253\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-13T17:42:40.102Z\", \"dateReserved\": \"2026-04-13T20:11:11.991Z\", \"assignerOrgId\": \"2499f714-1537-4658-8207-48ae4bb9eae9\", \"datePublished\": \"2026-05-13T08:28:03.004Z\", \"assignerShortName\": \"curl\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
CERTFR-2026-AVI-0514
Vulnerability from certfr_avis - Published: 2026-04-29 - Updated: 2026-04-29
De multiples vulnérabilités ont été découvertes dans Curl. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Curl | cURL et libcurl | Curl versions postérieures ou égales à 7.10.6 et antérieures à 8.20.0 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Curl versions post\u00e9rieures ou \u00e9gales \u00e0 7.10.6 et ant\u00e9rieures \u00e0 8.20.0",
"product": {
"name": "cURL et libcurl",
"vendor": {
"name": "Curl",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-1965",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1965"
},
{
"name": "CVE-2026-6429",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6429"
},
{
"name": "CVE-2024-11053",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11053"
},
{
"name": "CVE-2026-6253",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6253"
},
{
"name": "CVE-2026-7009",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7009"
},
{
"name": "CVE-2026-4873",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4873"
},
{
"name": "CVE-2026-5773",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5773"
},
{
"name": "CVE-2026-6276",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6276"
},
{
"name": "CVE-2026-7168",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7168"
},
{
"name": "CVE-2026-5545",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5545"
}
],
"initial_release_date": "2026-04-29T00:00:00",
"last_revision_date": "2026-04-29T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0514",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-04-29T00:00:00.000000"
}
],
"risks": [
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Curl. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Curl",
"vendor_advisories": [
{
"published_at": "2026-04-29",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-6429",
"url": "https://curl.se/docs/CVE-2026-6429.html"
},
{
"published_at": "2026-04-29",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-6253",
"url": "https://curl.se/docs/CVE-2026-6253.html"
},
{
"published_at": "2026-04-29",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-5545",
"url": "https://curl.se/docs/CVE-2026-5545.html"
},
{
"published_at": "2026-04-29",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-4873",
"url": "https://curl.se/docs/CVE-2026-4873.html"
},
{
"published_at": "2026-04-29",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-7168",
"url": "https://curl.se/docs/CVE-2026-7168.html"
},
{
"published_at": "2026-04-29",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-7009",
"url": "https://curl.se/docs/CVE-2026-7009.html"
},
{
"published_at": "2026-04-29",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-5773",
"url": "https://curl.se/docs/CVE-2026-5773.html"
},
{
"published_at": "2026-04-29",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-6276",
"url": "https://curl.se/docs/CVE-2026-6276.html"
}
]
}
CERTFR-2026-AVI-0796
Vulnerability from certfr_avis - Published: 2026-06-24 - Updated: 2026-06-24
De multiples vulnérabilités ont été découvertes dans Tenable Identity Exposure. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Tenable | Identity Exposure | Tenable Identity Exposure versions antérieures à v3.93.5 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Tenable Identity Exposure versions ant\u00e9rieures \u00e0 v3.93.5",
"product": {
"name": "Identity Exposure",
"vendor": {
"name": "Tenable",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-66199",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66199"
},
{
"name": "CVE-2026-42789",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42789"
},
{
"name": "CVE-2026-21637",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21637"
},
{
"name": "CVE-2026-34180",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34180"
},
{
"name": "CVE-2025-55248",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55248"
},
{
"name": "CVE-2026-35188",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35188"
},
{
"name": "CVE-2026-42766",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42766"
},
{
"name": "CVE-2026-9076",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9076"
},
{
"name": "CVE-2025-15469",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15469"
},
{
"name": "CVE-2026-1965",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1965"
},
{
"name": "CVE-2026-34181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34181"
},
{
"name": "CVE-2026-42790",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42790"
},
{
"name": "CVE-2026-42770",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42770"
},
{
"name": "CVE-2025-69419",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69419"
},
{
"name": "CVE-2026-3783",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3783"
},
{
"name": "CVE-2026-6429",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6429"
},
{
"name": "CVE-2026-32167",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32167"
},
{
"name": "CVE-2026-32175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32175"
},
{
"name": "CVE-2026-28386",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28386"
},
{
"name": "CVE-2026-45445",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45445"
},
{
"name": "CVE-2026-45591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45591"
},
{
"name": "CVE-2025-15467",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15467"
},
{
"name": "CVE-2025-55130",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55130"
},
{
"name": "CVE-2025-55131",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55131"
},
{
"name": "CVE-2025-59465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59465"
},
{
"name": "CVE-2026-7383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7383"
},
{
"name": "CVE-2026-21715",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21715"
},
{
"name": "CVE-2026-42771",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42771"
},
{
"name": "CVE-2026-35433",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35433"
},
{
"name": "CVE-2026-22795",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22795"
},
{
"name": "CVE-2026-26130",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26130"
},
{
"name": "CVE-2026-33120",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33120"
},
{
"name": "CVE-2026-28389",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28389"
},
{
"name": "CVE-2026-42765",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42765"
},
{
"name": "CVE-2026-21717",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21717"
},
{
"name": "CVE-2025-69421",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69421"
},
{
"name": "CVE-2026-42769",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42769"
},
{
"name": "CVE-2026-6253",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6253"
},
{
"name": "CVE-2026-7009",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7009"
},
{
"name": "CVE-2026-21716",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21716"
},
{
"name": "CVE-2026-22796",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22796"
},
{
"name": "CVE-2026-42899",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42899"
},
{
"name": "CVE-2026-21262",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21262"
},
{
"name": "CVE-2026-26171",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26171"
},
{
"name": "CVE-2026-32203",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32203"
},
{
"name": "CVE-2025-55132",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55132"
},
{
"name": "CVE-2026-45447",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45447"
},
{
"name": "CVE-2025-55247",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55247"
},
{
"name": "CVE-2025-14017",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14017"
},
{
"name": "CVE-2026-3805",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3805"
},
{
"name": "CVE-2026-28387",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28387"
},
{
"name": "CVE-2026-28388",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28388"
},
{
"name": "CVE-2026-32177",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32177"
},
{
"name": "CVE-2026-21714",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21714"
},
{
"name": "CVE-2026-45446",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45446"
},
{
"name": "CVE-2026-40370",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40370"
},
{
"name": "CVE-2026-13007",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13007"
},
{
"name": "CVE-2025-68160",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68160"
},
{
"name": "CVE-2026-34183",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34183"
},
{
"name": "CVE-2025-13034",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13034"
},
{
"name": "CVE-2026-28390",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28390"
},
{
"name": "CVE-2026-45490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45490"
},
{
"name": "CVE-2025-14524",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14524"
},
{
"name": "CVE-2026-42767",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42767"
},
{
"name": "CVE-2026-4873",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4873"
},
{
"name": "CVE-2025-69418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69418"
},
{
"name": "CVE-2025-59466",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59466"
},
{
"name": "CVE-2025-15468",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15468"
},
{
"name": "CVE-2026-21713",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21713"
},
{
"name": "CVE-2026-33116",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33116"
},
{
"name": "CVE-2026-42764",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42764"
},
{
"name": "CVE-2026-31789",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-31789"
},
{
"name": "CVE-2026-5773",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5773"
},
{
"name": "CVE-2026-32178",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32178"
},
{
"name": "CVE-2026-6276",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6276"
},
{
"name": "CVE-2026-42768",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42768"
},
{
"name": "CVE-2025-11187",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11187"
},
{
"name": "CVE-2025-15079",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15079"
},
{
"name": "CVE-2026-2673",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2673"
},
{
"name": "CVE-2026-45491",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45491"
},
{
"name": "CVE-2025-14819",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14819"
},
{
"name": "CVE-2026-34182",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34182"
},
{
"name": "CVE-2025-55315",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55315"
},
{
"name": "CVE-2026-21218",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21218"
},
{
"name": "CVE-2026-7168",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7168"
},
{
"name": "CVE-2026-32176",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32176"
},
{
"name": "CVE-2025-69420",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69420"
},
{
"name": "CVE-2025-15224",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15224"
},
{
"name": "CVE-2026-31790",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-31790"
},
{
"name": "CVE-2026-5545",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5545"
},
{
"name": "CVE-2026-21710",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21710"
},
{
"name": "CVE-2026-3784",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3784"
}
],
"initial_release_date": "2026-06-24T00:00:00",
"last_revision_date": "2026-06-24T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0796",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-06-24T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Injection SQL (SQLi)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Tenable Identity Exposure. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Tenable Identity Exposure",
"vendor_advisories": [
{
"published_at": "2026-06-23",
"title": "Bulletin de s\u00e9curit\u00e9 Tenable tns-2026-16",
"url": "https://www.tenable.com/security/tns-2026-16"
}
]
}
FKIE_CVE-2026-6253
Vulnerability from fkie_nvd - Published: 2026-05-13 13:01 - Updated: 2026-06-17 11:00
Severity
Summary
curl might erroneously pass on credentials for a first proxy to a second
proxy.
This can happen when the following conditions are true:
1. curl is setup to use specific different proxies for different URL schemes
2. the first proxy needs credentials
3. the second proxy uses no credentials
4. while using the first proxy (using say `http://`), curl is asked to follow
a redirect to a URL using another scheme (say `https://`), accessed using a
second, different, proxy
References
| URL | Tags | ||
|---|---|---|---|
| 2499f714-1537-4658-8207-48ae4bb9eae9 | https://curl.se/docs/CVE-2026-6253.html | Patch, Vendor Advisory | |
| 2499f714-1537-4658-8207-48ae4bb9eae9 | https://curl.se/docs/CVE-2026-6253.json | Vendor Advisory | |
| 2499f714-1537-4658-8207-48ae4bb9eae9 | https://hackerone.com/reports/3669637 | Exploit, Issue Tracking, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.openwall.com/lists/oss-security/2026/04/29/11 | Mailing List, Patch, Third Party Advisory | |
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | https://hackerone.com/reports/3669637 | Exploit, Issue Tracking, Third Party Advisory |
{
"affected": [
{
"affectedData": [
{
"defaultStatus": "unaffected",
"product": "curl",
"vendor": "curl",
"versions": [
{
"lessThanOrEqual": "8.19.0",
"status": "affected",
"version": "8.19.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.18.0",
"status": "affected",
"version": "8.18.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.17.0",
"status": "affected",
"version": "8.17.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.16.0",
"status": "affected",
"version": "8.16.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.15.0",
"status": "affected",
"version": "8.15.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.14.1",
"status": "affected",
"version": "8.14.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.14.0",
"status": "affected",
"version": "8.14.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.13.0",
"status": "affected",
"version": "8.13.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.12.1",
"status": "affected",
"version": "8.12.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.12.0",
"status": "affected",
"version": "8.12.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.11.1",
"status": "affected",
"version": "8.11.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.11.0",
"status": "affected",
"version": "8.11.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.10.1",
"status": "affected",
"version": "8.10.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.10.0",
"status": "affected",
"version": "8.10.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.9.1",
"status": "affected",
"version": "8.9.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.9.0",
"status": "affected",
"version": "8.9.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.8.0",
"status": "affected",
"version": "8.8.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.7.1",
"status": "affected",
"version": "8.7.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.7.0",
"status": "affected",
"version": "8.7.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.6.0",
"status": "affected",
"version": "8.6.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.5.0",
"status": "affected",
"version": "8.5.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.4.0",
"status": "affected",
"version": "8.4.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.3.0",
"status": "affected",
"version": "8.3.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.2.1",
"status": "affected",
"version": "8.2.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.2.0",
"status": "affected",
"version": "8.2.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.1.2",
"status": "affected",
"version": "8.1.2",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.1.1",
"status": "affected",
"version": "8.1.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.1.0",
"status": "affected",
"version": "8.1.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.0.1",
"status": "affected",
"version": "8.0.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "8.0.0",
"status": "affected",
"version": "8.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.88.1",
"status": "affected",
"version": "7.88.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.88.0",
"status": "affected",
"version": "7.88.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.87.0",
"status": "affected",
"version": "7.87.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.86.0",
"status": "affected",
"version": "7.86.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.85.0",
"status": "affected",
"version": "7.85.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.84.0",
"status": "affected",
"version": "7.84.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.83.1",
"status": "affected",
"version": "7.83.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.83.0",
"status": "affected",
"version": "7.83.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.82.0",
"status": "affected",
"version": "7.82.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.81.0",
"status": "affected",
"version": "7.81.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.80.0",
"status": "affected",
"version": "7.80.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.79.1",
"status": "affected",
"version": "7.79.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.79.0",
"status": "affected",
"version": "7.79.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.78.0",
"status": "affected",
"version": "7.78.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.77.0",
"status": "affected",
"version": "7.77.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.76.1",
"status": "affected",
"version": "7.76.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.76.0",
"status": "affected",
"version": "7.76.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.75.0",
"status": "affected",
"version": "7.75.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.74.0",
"status": "affected",
"version": "7.74.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.73.0",
"status": "affected",
"version": "7.73.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.72.0",
"status": "affected",
"version": "7.72.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.71.1",
"status": "affected",
"version": "7.71.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.71.0",
"status": "affected",
"version": "7.71.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.70.0",
"status": "affected",
"version": "7.70.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.69.1",
"status": "affected",
"version": "7.69.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.69.0",
"status": "affected",
"version": "7.69.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.68.0",
"status": "affected",
"version": "7.68.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.67.0",
"status": "affected",
"version": "7.67.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.66.0",
"status": "affected",
"version": "7.66.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.65.3",
"status": "affected",
"version": "7.65.3",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.65.2",
"status": "affected",
"version": "7.65.2",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.65.1",
"status": "affected",
"version": "7.65.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.65.0",
"status": "affected",
"version": "7.65.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.64.1",
"status": "affected",
"version": "7.64.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.64.0",
"status": "affected",
"version": "7.64.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.63.0",
"status": "affected",
"version": "7.63.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.62.0",
"status": "affected",
"version": "7.62.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.61.1",
"status": "affected",
"version": "7.61.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.61.0",
"status": "affected",
"version": "7.61.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.60.0",
"status": "affected",
"version": "7.60.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.59.0",
"status": "affected",
"version": "7.59.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.58.0",
"status": "affected",
"version": "7.58.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.57.0",
"status": "affected",
"version": "7.57.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.56.1",
"status": "affected",
"version": "7.56.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.56.0",
"status": "affected",
"version": "7.56.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.55.1",
"status": "affected",
"version": "7.55.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.55.0",
"status": "affected",
"version": "7.55.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.54.1",
"status": "affected",
"version": "7.54.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.54.0",
"status": "affected",
"version": "7.54.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.53.1",
"status": "affected",
"version": "7.53.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.53.0",
"status": "affected",
"version": "7.53.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.52.1",
"status": "affected",
"version": "7.52.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.52.0",
"status": "affected",
"version": "7.52.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.51.0",
"status": "affected",
"version": "7.51.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.50.3",
"status": "affected",
"version": "7.50.3",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.50.2",
"status": "affected",
"version": "7.50.2",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.50.1",
"status": "affected",
"version": "7.50.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.50.0",
"status": "affected",
"version": "7.50.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.49.1",
"status": "affected",
"version": "7.49.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.49.0",
"status": "affected",
"version": "7.49.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.48.0",
"status": "affected",
"version": "7.48.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.47.1",
"status": "affected",
"version": "7.47.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.47.0",
"status": "affected",
"version": "7.47.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.46.0",
"status": "affected",
"version": "7.46.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.45.0",
"status": "affected",
"version": "7.45.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.44.0",
"status": "affected",
"version": "7.44.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.43.0",
"status": "affected",
"version": "7.43.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.42.1",
"status": "affected",
"version": "7.42.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.42.0",
"status": "affected",
"version": "7.42.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.41.0",
"status": "affected",
"version": "7.41.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.40.0",
"status": "affected",
"version": "7.40.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.39.0",
"status": "affected",
"version": "7.39.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.38.0",
"status": "affected",
"version": "7.38.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.37.1",
"status": "affected",
"version": "7.37.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.37.0",
"status": "affected",
"version": "7.37.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.36.0",
"status": "affected",
"version": "7.36.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.35.0",
"status": "affected",
"version": "7.35.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.34.0",
"status": "affected",
"version": "7.34.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.33.0",
"status": "affected",
"version": "7.33.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.32.0",
"status": "affected",
"version": "7.32.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.31.0",
"status": "affected",
"version": "7.31.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.30.0",
"status": "affected",
"version": "7.30.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.29.0",
"status": "affected",
"version": "7.29.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.28.1",
"status": "affected",
"version": "7.28.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.28.0",
"status": "affected",
"version": "7.28.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.27.0",
"status": "affected",
"version": "7.27.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.26.0",
"status": "affected",
"version": "7.26.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.25.0",
"status": "affected",
"version": "7.25.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.24.0",
"status": "affected",
"version": "7.24.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.23.1",
"status": "affected",
"version": "7.23.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.23.0",
"status": "affected",
"version": "7.23.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.22.0",
"status": "affected",
"version": "7.22.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.21.7",
"status": "affected",
"version": "7.21.7",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.21.6",
"status": "affected",
"version": "7.21.6",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.21.5",
"status": "affected",
"version": "7.21.5",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.21.4",
"status": "affected",
"version": "7.21.4",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.21.3",
"status": "affected",
"version": "7.21.3",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.21.2",
"status": "affected",
"version": "7.21.2",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.21.1",
"status": "affected",
"version": "7.21.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.21.0",
"status": "affected",
"version": "7.21.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.20.1",
"status": "affected",
"version": "7.20.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.20.0",
"status": "affected",
"version": "7.20.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.19.7",
"status": "affected",
"version": "7.19.7",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.19.6",
"status": "affected",
"version": "7.19.6",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.19.5",
"status": "affected",
"version": "7.19.5",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.19.4",
"status": "affected",
"version": "7.19.4",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.19.3",
"status": "affected",
"version": "7.19.3",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.19.2",
"status": "affected",
"version": "7.19.2",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.19.1",
"status": "affected",
"version": "7.19.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.19.0",
"status": "affected",
"version": "7.19.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.18.2",
"status": "affected",
"version": "7.18.2",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.18.1",
"status": "affected",
"version": "7.18.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.18.0",
"status": "affected",
"version": "7.18.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.17.1",
"status": "affected",
"version": "7.17.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.17.0",
"status": "affected",
"version": "7.17.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.16.4",
"status": "affected",
"version": "7.16.4",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.16.3",
"status": "affected",
"version": "7.16.3",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.16.2",
"status": "affected",
"version": "7.16.2",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.16.1",
"status": "affected",
"version": "7.16.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.16.0",
"status": "affected",
"version": "7.16.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.15.5",
"status": "affected",
"version": "7.15.5",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.15.4",
"status": "affected",
"version": "7.15.4",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.15.3",
"status": "affected",
"version": "7.15.3",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.15.2",
"status": "affected",
"version": "7.15.2",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.15.1",
"status": "affected",
"version": "7.15.1",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.15.0",
"status": "affected",
"version": "7.15.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.14.1",
"status": "affected",
"version": "7.14.1",
"versionType": "semver"
}
]
}
],
"source": "2499f714-1537-4658-8207-48ae4bb9eae9"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C839F5FA-8CCE-4F13-851D-E60E8EAAA08C",
"versionEndExcluding": "8.20.0",
"versionStartIncluding": "7.14.1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "curl might erroneously pass on credentials for a first proxy to a second\nproxy.\n\nThis can happen when the following conditions are true:\n\n1. curl is setup to use specific different proxies for different URL schemes\n2. the first proxy needs credentials\n3. the second proxy uses no credentials\n4. while using the first proxy (using say `http://`), curl is asked to follow\n a redirect to a URL using another scheme (say `https://`), accessed using a\n second, different, proxy"
}
],
"id": "CVE-2026-6253",
"lastModified": "2026-06-17T11:00:33.003",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.2,
"impactScore": 3.6,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-6253",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-13T17:42:30.813126Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-05-13T13:01:56.570",
"references": [
{
"source": "2499f714-1537-4658-8207-48ae4bb9eae9",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://curl.se/docs/CVE-2026-6253.html"
},
{
"source": "2499f714-1537-4658-8207-48ae4bb9eae9",
"tags": [
"Vendor Advisory"
],
"url": "https://curl.se/docs/CVE-2026-6253.json"
},
{
"source": "2499f714-1537-4658-8207-48ae4bb9eae9",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://hackerone.com/reports/3669637"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2026/04/29/11"
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://hackerone.com/reports/3669637"
}
],
"sourceIdentifier": "2499f714-1537-4658-8207-48ae4bb9eae9",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-522"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-6QJR-R96V-3WCX
Vulnerability from github – Published: 2026-05-13 18:30 – Updated: 2026-05-13 18:30
VLAI
Details
curl might erroneously pass on credentials for a first proxy to a second proxy.
This can happen when the following conditions are true:
- curl is setup to use specific different proxies for different URL schemes
- the first proxy needs credentials
- the second proxy uses no credentials
- while using the first proxy (using say
http://), curl is asked to follow a redirect to a URL using another scheme (sayhttps://), accessed using a second, different, proxy
Severity
5.9 (Medium)
{
"affected": [],
"aliases": [
"CVE-2026-6253"
],
"database_specific": {
"cwe_ids": [
"CWE-522"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-05-13T13:01:56Z",
"severity": "MODERATE"
},
"details": "curl might erroneously pass on credentials for a first proxy to a second\nproxy.\n\nThis can happen when the following conditions are true:\n\n1. curl is setup to use specific different proxies for different URL schemes\n2. the first proxy needs credentials\n3. the second proxy uses no credentials\n4. while using the first proxy (using say `http://`), curl is asked to follow\n a redirect to a URL using another scheme (say `https://`), accessed using a\n second, different, proxy",
"id": "GHSA-6qjr-r96v-3wcx",
"modified": "2026-05-13T18:30:52Z",
"published": "2026-05-13T18:30:52Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6253"
},
{
"type": "WEB",
"url": "https://hackerone.com/reports/3669637"
},
{
"type": "WEB",
"url": "https://curl.se/docs/CVE-2026-6253.html"
},
{
"type": "WEB",
"url": "https://curl.se/docs/CVE-2026-6253.json"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2026/04/29/11"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
MSRC_CVE-2026-6253
Vulnerability from csaf_microsoft - Published: 2026-05-02 00:00 - Updated: 2026-06-15 01:40Summary
proxy credentials leak over redirect-to proxy
Notes
Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 21119-17084 | — | ||
| Unresolved product id: 21382-17084 | — |
Known affected
3 products
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 17084-2 | — | ||
| Unresolved product id: 17084-4 | — | ||
| Unresolved product id: 17084-3 | — | ||
| Unresolved product id: 17084-7 | — |
References
4 references
| URL | Category |
|---|---|
| https://msrc.microsoft.com/csaf/vex/2026/msrc_cve… | self |
| https://support.microsoft.com/lifecycle | external |
| https://www.first.org/cvss | external |
| https://msrc.microsoft.com/csaf/vex/2026/msrc_cve… | self |
{
"document": {
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2026-6253 proxy credentials leak over redirect-to proxy - VEX",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-6253.json"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": "proxy credentials leak over redirect-to proxy",
"tracking": {
"current_release_date": "2026-06-15T01:40:58.000Z",
"generator": {
"date": "2026-06-15T07:16:59.750Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2026-6253",
"initial_release_date": "2026-05-02T00:00:00.000Z",
"revision_history": [
{
"date": "2026-05-14T01:02:50.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
},
{
"date": "2026-05-19T01:46:47.000Z",
"legacy_version": "2",
"number": "2",
"summary": "Information published."
},
{
"date": "2026-06-03T01:39:53.000Z",
"legacy_version": "3",
"number": "3",
"summary": "Information published."
},
{
"date": "2026-06-13T01:41:40.000Z",
"legacy_version": "4",
"number": "4",
"summary": "Information published."
},
{
"date": "2026-06-15T01:40:58.000Z",
"legacy_version": "5",
"number": "5",
"summary": "Information published."
}
],
"status": "final",
"version": "5"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "3.0",
"product": {
"name": "Azure Linux 3.0",
"product_id": "17084"
}
}
],
"category": "product_name",
"name": "Azure Linux"
},
{
"branches": [
{
"category": "product_version_range",
"name": "azl3 curl 0:8.11.1-6.azl3",
"product": {
"name": "azl3 curl 0:8.11.1-6.azl3",
"product_id": "5"
}
},
{
"category": "product_version_range",
"name": "\u003cazl3 curl 0:8.11.1-7.azl3",
"product": {
"name": "\u003cazl3 curl 0:8.11.1-7.azl3",
"product_id": "1"
}
},
{
"category": "product_version",
"name": "azl3 curl 0:8.11.1-7.azl3",
"product": {
"name": "azl3 curl 0:8.11.1-7.azl3",
"product_id": "21382"
}
}
],
"category": "product_name",
"name": "curl"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cazl3 cmake 0:3.30.3-13.azl3",
"product": {
"name": "\u003cazl3 cmake 0:3.30.3-13.azl3",
"product_id": "6"
}
},
{
"category": "product_version",
"name": "azl3 cmake 0:3.30.3-13.azl3",
"product": {
"name": "azl3 cmake 0:3.30.3-13.azl3",
"product_id": "21119"
}
}
],
"category": "product_name",
"name": "cmake"
},
{
"category": "product_name",
"name": "azl3 mysql 0:8.0.46-1.azl3",
"product": {
"name": "azl3 mysql 0:8.0.46-1.azl3",
"product_id": "2"
}
},
{
"category": "product_name",
"name": "azl3 rust 0:1.75.0-28.azl3",
"product": {
"name": "azl3 rust 0:1.75.0-28.azl3",
"product_id": "4"
}
},
{
"category": "product_name",
"name": "azl3 rust 0:1.90.0-7.azl3",
"product": {
"name": "azl3 rust 0:1.90.0-7.azl3",
"product_id": "3"
}
},
{
"category": "product_name",
"name": "azl3 tensorflow 0:2.16.1-11.azl3",
"product": {
"name": "azl3 tensorflow 0:2.16.1-11.azl3",
"product_id": "7"
}
}
],
"category": "vendor",
"name": "Microsoft"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "azl3 curl 0:8.11.1-6.azl3 as a component of Azure Linux 3.0",
"product_id": "17084-5"
},
"product_reference": "5",
"relates_to_product_reference": "17084"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "\u003cazl3 cmake 0:3.30.3-13.azl3 as a component of Azure Linux 3.0",
"product_id": "17084-6"
},
"product_reference": "6",
"relates_to_product_reference": "17084"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "azl3 cmake 0:3.30.3-13.azl3 as a component of Azure Linux 3.0",
"product_id": "21119-17084"
},
"product_reference": "21119",
"relates_to_product_reference": "17084"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "azl3 mysql 0:8.0.46-1.azl3 as a component of Azure Linux 3.0",
"product_id": "17084-2"
},
"product_reference": "2",
"relates_to_product_reference": "17084"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "azl3 rust 0:1.75.0-28.azl3 as a component of Azure Linux 3.0",
"product_id": "17084-4"
},
"product_reference": "4",
"relates_to_product_reference": "17084"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "azl3 rust 0:1.90.0-7.azl3 as a component of Azure Linux 3.0",
"product_id": "17084-3"
},
"product_reference": "3",
"relates_to_product_reference": "17084"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "azl3 tensorflow 0:2.16.1-11.azl3 as a component of Azure Linux 3.0",
"product_id": "17084-7"
},
"product_reference": "7",
"relates_to_product_reference": "17084"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "\u003cazl3 curl 0:8.11.1-7.azl3 as a component of Azure Linux 3.0",
"product_id": "17084-1"
},
"product_reference": "1",
"relates_to_product_reference": "17084"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "azl3 curl 0:8.11.1-7.azl3 as a component of Azure Linux 3.0",
"product_id": "21382-17084"
},
"product_reference": "21382",
"relates_to_product_reference": "17084"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6253",
"flags": [
{
"label": "component_not_present",
"product_ids": [
"17084-2",
"17084-4",
"17084-3",
"17084-7"
]
}
],
"notes": [
{
"category": "general",
"text": "curl",
"title": "Assigning CNA"
}
],
"product_status": {
"fixed": [
"21119-17084",
"21382-17084"
],
"known_affected": [
"17084-5",
"17084-6",
"17084-1"
],
"known_not_affected": [
"17084-2",
"17084-4",
"17084-3",
"17084-7"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-6253 proxy credentials leak over redirect-to proxy - VEX",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-6253.json"
}
],
"remediations": [
{
"category": "none_available",
"date": "2026-05-14T01:02:50.000Z",
"details": "There is no fix available for this vulnerability as of now",
"product_ids": [
"17084-5"
]
},
{
"category": "vendor_fix",
"date": "2026-05-14T01:02:50.000Z",
"details": "0:3.30.3-14.azl3:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
"product_ids": [
"17084-6"
],
"url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
},
{
"category": "vendor_fix",
"date": "2026-05-14T01:02:50.000Z",
"details": "0:8.11.1-8.azl3:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
"product_ids": [
"17084-1"
],
"url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
}
],
"title": "proxy credentials leak over redirect-to proxy"
}
]
}
OPENSUSE-SU-2026:10674-1
Vulnerability from csaf_opensuse - Published: 2026-05-04 00:00 - Updated: 2026-05-04 00:00Summary
curl-8.20.0-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: curl-8.20.0-1.1 on GA media
Description of the patch: These are all security issues fixed in the curl-8.20.0-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-10674
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
6.5 (Medium)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5.9 (Medium)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5.9 (Medium)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
20 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "curl-8.20.0-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the curl-8.20.0-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-10674",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10674-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4873 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4873/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5545 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5545/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5773 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5773/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6253 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6253/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6276 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6276/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6429 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6429/"
}
],
"title": "curl-8.20.0-1.1 on GA media",
"tracking": {
"current_release_date": "2026-05-04T00:00:00Z",
"generator": {
"date": "2026-05-04T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:10674-1",
"initial_release_date": "2026-05-04T00:00:00Z",
"revision_history": [
{
"date": "2026-05-04T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "curl-8.20.0-1.1.aarch64",
"product": {
"name": "curl-8.20.0-1.1.aarch64",
"product_id": "curl-8.20.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "curl-fish-completion-8.20.0-1.1.aarch64",
"product": {
"name": "curl-fish-completion-8.20.0-1.1.aarch64",
"product_id": "curl-fish-completion-8.20.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "curl-zsh-completion-8.20.0-1.1.aarch64",
"product": {
"name": "curl-zsh-completion-8.20.0-1.1.aarch64",
"product_id": "curl-zsh-completion-8.20.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-8.20.0-1.1.aarch64",
"product": {
"name": "libcurl-devel-8.20.0-1.1.aarch64",
"product_id": "libcurl-devel-8.20.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-32bit-8.20.0-1.1.aarch64",
"product": {
"name": "libcurl-devel-32bit-8.20.0-1.1.aarch64",
"product_id": "libcurl-devel-32bit-8.20.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-doc-8.20.0-1.1.aarch64",
"product": {
"name": "libcurl-devel-doc-8.20.0-1.1.aarch64",
"product_id": "libcurl-devel-doc-8.20.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libcurl4-8.20.0-1.1.aarch64",
"product": {
"name": "libcurl4-8.20.0-1.1.aarch64",
"product_id": "libcurl4-8.20.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libcurl4-32bit-8.20.0-1.1.aarch64",
"product": {
"name": "libcurl4-32bit-8.20.0-1.1.aarch64",
"product_id": "libcurl4-32bit-8.20.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "wcurl-8.20.0-1.1.aarch64",
"product": {
"name": "wcurl-8.20.0-1.1.aarch64",
"product_id": "wcurl-8.20.0-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-8.20.0-1.1.ppc64le",
"product": {
"name": "curl-8.20.0-1.1.ppc64le",
"product_id": "curl-8.20.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "curl-fish-completion-8.20.0-1.1.ppc64le",
"product": {
"name": "curl-fish-completion-8.20.0-1.1.ppc64le",
"product_id": "curl-fish-completion-8.20.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "curl-zsh-completion-8.20.0-1.1.ppc64le",
"product": {
"name": "curl-zsh-completion-8.20.0-1.1.ppc64le",
"product_id": "curl-zsh-completion-8.20.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libcurl-devel-8.20.0-1.1.ppc64le",
"product": {
"name": "libcurl-devel-8.20.0-1.1.ppc64le",
"product_id": "libcurl-devel-8.20.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"product": {
"name": "libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"product_id": "libcurl-devel-32bit-8.20.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libcurl-devel-doc-8.20.0-1.1.ppc64le",
"product": {
"name": "libcurl-devel-doc-8.20.0-1.1.ppc64le",
"product_id": "libcurl-devel-doc-8.20.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libcurl4-8.20.0-1.1.ppc64le",
"product": {
"name": "libcurl4-8.20.0-1.1.ppc64le",
"product_id": "libcurl4-8.20.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libcurl4-32bit-8.20.0-1.1.ppc64le",
"product": {
"name": "libcurl4-32bit-8.20.0-1.1.ppc64le",
"product_id": "libcurl4-32bit-8.20.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "wcurl-8.20.0-1.1.ppc64le",
"product": {
"name": "wcurl-8.20.0-1.1.ppc64le",
"product_id": "wcurl-8.20.0-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-8.20.0-1.1.s390x",
"product": {
"name": "curl-8.20.0-1.1.s390x",
"product_id": "curl-8.20.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "curl-fish-completion-8.20.0-1.1.s390x",
"product": {
"name": "curl-fish-completion-8.20.0-1.1.s390x",
"product_id": "curl-fish-completion-8.20.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "curl-zsh-completion-8.20.0-1.1.s390x",
"product": {
"name": "curl-zsh-completion-8.20.0-1.1.s390x",
"product_id": "curl-zsh-completion-8.20.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libcurl-devel-8.20.0-1.1.s390x",
"product": {
"name": "libcurl-devel-8.20.0-1.1.s390x",
"product_id": "libcurl-devel-8.20.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libcurl-devel-32bit-8.20.0-1.1.s390x",
"product": {
"name": "libcurl-devel-32bit-8.20.0-1.1.s390x",
"product_id": "libcurl-devel-32bit-8.20.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libcurl-devel-doc-8.20.0-1.1.s390x",
"product": {
"name": "libcurl-devel-doc-8.20.0-1.1.s390x",
"product_id": "libcurl-devel-doc-8.20.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libcurl4-8.20.0-1.1.s390x",
"product": {
"name": "libcurl4-8.20.0-1.1.s390x",
"product_id": "libcurl4-8.20.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libcurl4-32bit-8.20.0-1.1.s390x",
"product": {
"name": "libcurl4-32bit-8.20.0-1.1.s390x",
"product_id": "libcurl4-32bit-8.20.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "wcurl-8.20.0-1.1.s390x",
"product": {
"name": "wcurl-8.20.0-1.1.s390x",
"product_id": "wcurl-8.20.0-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-8.20.0-1.1.x86_64",
"product": {
"name": "curl-8.20.0-1.1.x86_64",
"product_id": "curl-8.20.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "curl-fish-completion-8.20.0-1.1.x86_64",
"product": {
"name": "curl-fish-completion-8.20.0-1.1.x86_64",
"product_id": "curl-fish-completion-8.20.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "curl-zsh-completion-8.20.0-1.1.x86_64",
"product": {
"name": "curl-zsh-completion-8.20.0-1.1.x86_64",
"product_id": "curl-zsh-completion-8.20.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-8.20.0-1.1.x86_64",
"product": {
"name": "libcurl-devel-8.20.0-1.1.x86_64",
"product_id": "libcurl-devel-8.20.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-32bit-8.20.0-1.1.x86_64",
"product": {
"name": "libcurl-devel-32bit-8.20.0-1.1.x86_64",
"product_id": "libcurl-devel-32bit-8.20.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-doc-8.20.0-1.1.x86_64",
"product": {
"name": "libcurl-devel-doc-8.20.0-1.1.x86_64",
"product_id": "libcurl-devel-doc-8.20.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl4-8.20.0-1.1.x86_64",
"product": {
"name": "libcurl4-8.20.0-1.1.x86_64",
"product_id": "libcurl4-8.20.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl4-32bit-8.20.0-1.1.x86_64",
"product": {
"name": "libcurl4-32bit-8.20.0-1.1.x86_64",
"product_id": "libcurl4-32bit-8.20.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "wcurl-8.20.0-1.1.x86_64",
"product": {
"name": "wcurl-8.20.0-1.1.x86_64",
"product_id": "wcurl-8.20.0-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.20.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64"
},
"product_reference": "curl-8.20.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.20.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le"
},
"product_reference": "curl-8.20.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.20.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:curl-8.20.0-1.1.s390x"
},
"product_reference": "curl-8.20.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.20.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64"
},
"product_reference": "curl-8.20.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-fish-completion-8.20.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64"
},
"product_reference": "curl-fish-completion-8.20.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-fish-completion-8.20.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le"
},
"product_reference": "curl-fish-completion-8.20.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-fish-completion-8.20.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x"
},
"product_reference": "curl-fish-completion-8.20.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-fish-completion-8.20.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64"
},
"product_reference": "curl-fish-completion-8.20.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-zsh-completion-8.20.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64"
},
"product_reference": "curl-zsh-completion-8.20.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-zsh-completion-8.20.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le"
},
"product_reference": "curl-zsh-completion-8.20.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-zsh-completion-8.20.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x"
},
"product_reference": "curl-zsh-completion-8.20.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-zsh-completion-8.20.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64"
},
"product_reference": "curl-zsh-completion-8.20.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.20.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64"
},
"product_reference": "libcurl-devel-8.20.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.20.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le"
},
"product_reference": "libcurl-devel-8.20.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.20.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x"
},
"product_reference": "libcurl-devel-8.20.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.20.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64"
},
"product_reference": "libcurl-devel-8.20.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-32bit-8.20.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64"
},
"product_reference": "libcurl-devel-32bit-8.20.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-32bit-8.20.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le"
},
"product_reference": "libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-32bit-8.20.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x"
},
"product_reference": "libcurl-devel-32bit-8.20.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-32bit-8.20.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64"
},
"product_reference": "libcurl-devel-32bit-8.20.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-doc-8.20.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64"
},
"product_reference": "libcurl-devel-doc-8.20.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-doc-8.20.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le"
},
"product_reference": "libcurl-devel-doc-8.20.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-doc-8.20.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x"
},
"product_reference": "libcurl-devel-doc-8.20.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-doc-8.20.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64"
},
"product_reference": "libcurl-devel-doc-8.20.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.20.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64"
},
"product_reference": "libcurl4-8.20.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.20.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le"
},
"product_reference": "libcurl4-8.20.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.20.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x"
},
"product_reference": "libcurl4-8.20.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.20.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64"
},
"product_reference": "libcurl4-8.20.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-8.20.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64"
},
"product_reference": "libcurl4-32bit-8.20.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-8.20.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le"
},
"product_reference": "libcurl4-32bit-8.20.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-8.20.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x"
},
"product_reference": "libcurl4-32bit-8.20.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-8.20.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64"
},
"product_reference": "libcurl4-32bit-8.20.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wcurl-8.20.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64"
},
"product_reference": "wcurl-8.20.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wcurl-8.20.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le"
},
"product_reference": "wcurl-8.20.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wcurl-8.20.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x"
},
"product_reference": "wcurl-8.20.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wcurl-8.20.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
},
"product_reference": "wcurl-8.20.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-4873",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4873"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4873",
"url": "https://www.suse.com/security/cve/CVE-2026-4873"
},
{
"category": "external",
"summary": "SUSE Bug 1262631 for CVE-2026-4873",
"url": "https://bugzilla.suse.com/1262631"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-04T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-4873"
},
{
"cve": "CVE-2026-5545",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5545"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5545",
"url": "https://www.suse.com/security/cve/CVE-2026-5545"
},
{
"category": "external",
"summary": "SUSE Bug 1262632 for CVE-2026-5545",
"url": "https://bugzilla.suse.com/1262632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-04T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-5545"
},
{
"cve": "CVE-2026-5773",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5773"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5773",
"url": "https://www.suse.com/security/cve/CVE-2026-5773"
},
{
"category": "external",
"summary": "SUSE Bug 1262633 for CVE-2026-5773",
"url": "https://bugzilla.suse.com/1262633"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-04T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-5773"
},
{
"cve": "CVE-2026-6253",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6253"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6253",
"url": "https://www.suse.com/security/cve/CVE-2026-6253"
},
{
"category": "external",
"summary": "SUSE Bug 1262635 for CVE-2026-6253",
"url": "https://bugzilla.suse.com/1262635"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-04T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-6253"
},
{
"cve": "CVE-2026-6276",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6276"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6276",
"url": "https://www.suse.com/security/cve/CVE-2026-6276"
},
{
"category": "external",
"summary": "SUSE Bug 1262636 for CVE-2026-6276",
"url": "https://bugzilla.suse.com/1262636"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-04T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-6276"
},
{
"cve": "CVE-2026-6429",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6429"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6429",
"url": "https://www.suse.com/security/cve/CVE-2026-6429"
},
{
"category": "external",
"summary": "SUSE Bug 1262638 for CVE-2026-6429",
"url": "https://bugzilla.suse.com/1262638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-fish-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:curl-zsh-completion-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-doc-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-8.20.0-1.1.x86_64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.aarch64",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.s390x",
"openSUSE Tumbleweed:wcurl-8.20.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-04T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-6429"
}
]
}
RHSA-2026:12916
Vulnerability from csaf_redhat - Published: 2026-05-02 00:23 - Updated: 2026-08-26 18:14Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Moderate
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
curl:
* curl-8.20.0-0.1.hum1 (aarch64, x86_64)
* libcurl-8.20.0-0.1.hum1 (aarch64, x86_64)
* libcurl-devel-8.20.0-0.1.hum1 (aarch64, x86_64)
* libcurl-minimal-8.20.0-0.1.hum1 (aarch64, x86_64)
* curl-8.20.0-0.1.hum1.src (src)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in curl. A remote attacker could exploit this by initiating an unencrypted connection (via IMAP, SMTP, or POP3) and then making a subsequent request to the same host that requires Transport Layer Security (TLS). Due to incorrect connection reuse, the subsequent request would bypass the TLS requirement, leading to the transmission of sensitive information in cleartext. This vulnerability, categorized as Cleartext Transmission of Sensitive Information (CWE-319), results in information disclosure.
5.3 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:curl-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:curl-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:curl-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in libcurl. An application using libcurl that performs an authenticated HTTP(S) request after a Negotiate-authenticated one to the same host may incorrectly reuse the previous connection. This authentication bypass vulnerability allows the second request to be sent over a connection authenticated with different credentials, potentially leading to unauthorized access or information disclosure.
6.5 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:curl-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:curl-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:curl-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in libcurl. Due to a logical error in the connection reuse mechanism for SMB (Server Message Block) transfers, libcurl might reuse an existing SMB connection with a different share than intended. This vulnerability, categorized as CWE-488 (Exposure of Data Element to Wrong Session), could lead to the download of an incorrect file or the upload of a file to an unintended location when an application uses libcurl for SMB transfers.
6.5 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:curl-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:curl-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:curl-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in curl. When curl is configured to use distinct proxies for different URL schemes, a redirect from a URL using an authenticated proxy to one using an unauthenticated proxy can inadvertently expose the initial proxy's credentials. This improper credential management (CWE-522) may allow an attacker to gain unauthorized access or information by intercepting these disclosed credentials.
5.3 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:curl-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:curl-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:curl-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in libcurl. This vulnerability allows for information disclosure when a custom `Host:` header is used in an initial HTTP request, and a subsequent request reuses the same connection without specifying a new `Host:` header. This can lead to libcurl incorrectly sending cookies intended for the first host to the second host, resulting in a cookie leak. This issue is categorized as an Origin Validation Error (CWE-346). Exploitation typically requires specific debugging configurations.
CWE-346 - Origin Validation ErrorAffected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:curl-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:curl-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:curl-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in libcurl. When configured to use a .netrc file for credentials and follow HTTP redirects, libcurl can inadvertently send the password from the initial connection to the redirected host. This sensitive information disclosure occurs when both the original and redirect URLs use clear text HTTP, are performed over the same HTTP proxy, and the same connection is reused. This vulnerability, categorized as an Exposure of Sensitive Information to an Unauthorized Actor (CWE-200), could allow an attacker to obtain user credentials.
6.5 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:curl-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:curl-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:curl-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
40 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\ncurl:\n * curl-8.20.0-0.1.hum1 (aarch64, x86_64)\n * libcurl-8.20.0-0.1.hum1 (aarch64, x86_64)\n * libcurl-devel-8.20.0-0.1.hum1 (aarch64, x86_64)\n * libcurl-minimal-8.20.0-0.1.hum1 (aarch64, x86_64)\n * curl-8.20.0-0.1.hum1.src (src)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:12916",
"url": "https://access.redhat.com/errata/RHSA-2026:12916"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6253",
"url": "https://access.redhat.com/security/cve/CVE-2026-6253"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6429",
"url": "https://access.redhat.com/security/cve/CVE-2026-6429"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6276",
"url": "https://access.redhat.com/security/cve/CVE-2026-6276"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5773",
"url": "https://access.redhat.com/security/cve/CVE-2026-5773"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5545",
"url": "https://access.redhat.com/security/cve/CVE-2026-5545"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4873",
"url": "https://access.redhat.com/security/cve/CVE-2026-4873"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_12916.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
"tracking": {
"current_release_date": "2026-08-26T18:14:52+00:00",
"generator": {
"date": "2026-08-26T18:14:52+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:12916",
"initial_release_date": "2026-05-02T00:23:55+00:00",
"revision_history": [
{
"date": "2026-05-02T00:23:55+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-26T18:14:52+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-main@aarch64",
"product": {
"name": "curl-main@aarch64",
"product_id": "curl-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@8.20.0-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-main@src",
"product": {
"name": "curl-main@src",
"product_id": "curl-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@8.20.0-0.1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-main@x86_64",
"product": {
"name": "curl-main@x86_64",
"product_id": "curl-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@8.20.0-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:curl-main@aarch64"
},
"product_reference": "curl-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:curl-main@src"
},
"product_reference": "curl-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:curl-main@x86_64"
},
"product_reference": "curl-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-4873",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"discovery_date": "2026-04-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461200"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. A remote attacker could exploit this by initiating an unencrypted connection (via IMAP, SMTP, or POP3) and then making a subsequent request to the same host that requires Transport Layer Security (TLS). Due to incorrect connection reuse, the subsequent request would bypass the TLS requirement, leading to the transmission of sensitive information in cleartext. This vulnerability, categorized as Cleartext Transmission of Sensitive Information (CWE-319), results in information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Information disclosure due to incorrect TLS connection reuse",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: This flaw in curl allows for information disclosure when an unencrypted connection is incorrectly reused for a subsequent request that expects TLS. This can lead to the cleartext transmission of sensitive data, potentially affecting Red Hat products that utilize curl for IMAP, SMTP, or POP3 connections where connection reuse is enabled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4873"
},
{
"category": "external",
"summary": "RHBZ#2461200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461200"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4873",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4873"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-4873.html",
"url": "https://curl.se/docs/CVE-2026-4873.html"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-02T00:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:12916"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid using clear-text IMAP, POP3, or SMTP transfers with curl. Ensure that all connections for these protocols are initiated with TLS from the outset to prevent the reuse of unencrypted connections.",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: curl: Information disclosure due to incorrect TLS connection reuse"
},
{
"cve": "CVE-2026-5545",
"cwe": {
"id": "CWE-488",
"name": "Exposure of Data Element to Wrong Session"
},
"discovery_date": "2026-04-23T16:35:33.607000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. An application using libcurl that performs an authenticated HTTP(S) request after a Negotiate-authenticated one to the same host may incorrectly reuse the previous connection. This authentication bypass vulnerability allows the second request to be sent over a connection authenticated with different credentials, potentially leading to unauthorized access or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: A flaw in libcurl allows for the wrong reuse of HTTP Negotiate authenticated connections. This can occur when an application makes an authenticated HTTP(S) request after a Negotiate-authenticated one to the same host, potentially leading to a request being sent over a connection authenticated with unintended credentials. This issue affects applications using libcurl versions from 7.10.6 up to and including 8.19.0.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5545"
},
{
"category": "external",
"summary": "RHBZ#2461204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5545",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5545"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5545",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5545"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-5545.html",
"url": "https://curl.se/docs/CVE-2026-5545.html"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-02T00:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:12916"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications using libcurl can disable connection reuse. This can be achieved by setting one of the following libcurl options: CURLOPT_FRESH_CONNECT to force a new connection for each request, CURLOPT_MAXCONNECTS to limit the total number of open connections, or CURLMOPT_MAX_HOST_CONNECTIONS when using the curl_multi API to limit connections per host. Disabling connection reuse may impact application performance due to increased overhead for establishing new connections.",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse"
},
{
"cve": "CVE-2026-5773",
"cwe": {
"id": "CWE-1025",
"name": "Comparison Using Wrong Factors"
},
"discovery_date": "2026-04-23T16:35:33.611000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461201"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. Due to a logical error in the connection reuse mechanism for SMB (Server Message Block) transfers, libcurl might reuse an existing SMB connection with a different share than intended. This vulnerability, categorized as CWE-488 (Exposure of Data Element to Wrong Session), could lead to the download of an incorrect file or the upload of a file to an unintended location when an application uses libcurl for SMB transfers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in libcurl affects applications performing SMB transfers. A logical error in the SMB connection reuse mechanism can lead to unintended file downloads or uploads to incorrect locations. This impacts applications that rely on libcurl for secure and accurate SMB file operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5773"
},
{
"category": "external",
"summary": "RHBZ#2461201",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461201"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5773",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5773"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5773",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5773"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-5773.html",
"url": "https://curl.se/docs/CVE-2026-5773.html"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-02T00:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:12916"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid using SMB for transfers with libcurl. As SMB support is opt-in since curl 8.20.0 and SMBv1 is deprecated, ensuring SMB functionality is disabled or not utilized in applications leveraging libcurl will prevent exposure. If SMB is required, consider upgrading to curl 8.20.0 or later, which addresses this flaw by preventing SMB connection reuse.",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse"
},
{
"cve": "CVE-2026-6253",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-04-23T16:35:33.623000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461202"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. When curl is configured to use distinct proxies for different URL schemes, a redirect from a URL using an authenticated proxy to one using an unauthenticated proxy can inadvertently expose the initial proxy\u0027s credentials. This improper credential management (CWE-522) may allow an attacker to gain unauthorized access or information by intercepting these disclosed credentials.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: This flaw in curl and libcurl allows proxy credentials to be inadvertently exposed to a second proxy during a redirect. This issue arises when curl is configured to use distinct proxies for different URL schemes, the initial proxy requires authentication, and a subsequent proxy does not. Red Hat products utilizing curl or libcurl in such a specific proxy chaining configuration may be affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6253"
},
{
"category": "external",
"summary": "RHBZ#2461202",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461202"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6253",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6253"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6253",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6253"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-6253.html",
"url": "https://curl.se/docs/CVE-2026-6253.html"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-02T00:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:12916"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid configuring curl or libcurl to use proxies that require credentials. This prevents the scenario where credentials for a first proxy could be inadvertently passed to a second proxy during a redirect.",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies"
},
{
"cve": "CVE-2026-6276",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-04-23T16:35:33.888000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461203"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. This vulnerability allows for information disclosure when a custom `Host:` header is used in an initial HTTP request, and a subsequent request reuses the same connection without specifying a new `Host:` header. This can lead to libcurl incorrectly sending cookies intended for the first host to the second host, resulting in a cookie leak. This issue is categorized as an Origin Validation Error (CWE-346). Exploitation typically requires specific debugging configurations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Low severity flaw affects libcurl when a custom `Host:` header is initially set for an HTTP request, and a subsequent request uses the same easy handle without a custom `Host:` header. This can lead to the second request sending cookies intended for the first host. The `curl` command-line tool is not affected by this issue. Exploitation typically requires specific debugging configurations, reducing its overall impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6276"
},
{
"category": "external",
"summary": "RHBZ#2461203",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461203"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6276",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6276"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6276",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6276"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-6276.html",
"url": "https://curl.se/docs/CVE-2026-6276.html"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-02T00:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:12916"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid using custom `Host:` headers with libcurl, especially when reusing the same easy handle for multiple requests. This vulnerability primarily arises from specific debugging configurations.",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers"
},
{
"cve": "CVE-2026-6429",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-04-23T16:35:34.628000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461205"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. When configured to use a .netrc file for credentials and follow HTTP redirects, libcurl can inadvertently send the password from the initial connection to the redirected host. This sensitive information disclosure occurs when both the original and redirect URLs use clear text HTTP, are performed over the same HTTP proxy, and the same connection is reused. This vulnerability, categorized as an Exposure of Sensitive Information to an Unauthorized Actor (CWE-200), could allow an attacker to obtain user credentials.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: libcurl: Credential leak via reused proxy connection during HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: A flaw in libcurl could lead to credential leakage. This issue occurs when libcurl is configured to use a `.netrc` file for credentials and follows HTTP redirects, potentially exposing passwords to the redirected host. Exploitation requires both the original and redirect URLs to be clear text HTTP, performed over the same HTTP proxy, and with connection reuse. The curl command-line tool is not affected by this vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6429"
},
{
"category": "external",
"summary": "RHBZ#2461205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461205"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6429",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6429"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6429",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6429"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-6429.html",
"url": "https://curl.se/docs/CVE-2026-6429.html"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-02T00:23:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:12916"
},
{
"category": "workaround",
"details": "To prevent the credential leak, avoid using the combination of .netrc for credentials, clear text HTTP URLs, and an HTTP proxy when making requests with libcurl. This operational control prevents the specific conditions that enable the vulnerability.",
"product_ids": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:curl-main@aarch64",
"Red Hat Hardened Images:curl-main@src",
"Red Hat Hardened Images:curl-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: libcurl: Credential leak via reused proxy connection during HTTP redirects"
}
]
}
RHSA-2026:56869
Vulnerability from csaf_redhat - Published: 2026-08-19 13:28 - Updated: 2026-08-26 18:16Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP5 security update
Severity
Important
Notes
Topic: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 Service Pack 5 is now available.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products and packaged under Red Hat JBoss Core Services, to allow for faster distribution of updates and for a more consistent update experience.
This release of Red Hat JBoss Core Services Apache HTTP Server 2.4.62 Service Pack 5 serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.62 Service Pack 4, and includes bug fixes and enhancements, which are documented in the Release Notes linked to in the References section.
Security Fix(es):
* jbcs-httpd24-httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516)
* jbcs-httpd24-httpd: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation (CVE-2026-24072)
* jbcs-httpd24-mod_http2: Apache HTTP Server mod_http2: Use After Free vulnerability allows arbitrary code execution or denial of service (CVE-2026-48913)
* libcurl-1.dll: libcurl: Information disclosure via cached SSL session and early data (CVE-2026-9545)
* libcurl-1.dll: libcurl: Security feature bypass due to improper mTLS connection reuse (CVE-2026-8932)
* libcurl-1.dll: libcurl: Information disclosure due to failure to clear proxy authentication credentials (CVE-2026-9079)
* libcurl-1.dll: libcurl: Information disclosure due to uncleared proxy authentication state (CVE-2026-8927)
* libcurl-1.dll: libcurl: Use-after-free vulnerability leading to Denial of Service (CVE-2026-10536)
* jbcs-httpd24-httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration (CVE-2026-29167)
* jbcs-httpd24-httpd: Apache httpd mod_dav_fs: Denial of Service due to path handling issue (CVE-2026-42535)
* jbcs-httpd24-httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631)
* jbcs-httpd24-httpd: SSRF in Apache HTTP Server with mod_proxy loaded (CVE-2024-43204)
* curl: curl: Cookie injection via malicious HTTP server using super cookies (CVE-2026-8924)
* curl: curl: Information disclosure via incorrect Digest authentication header reuse (CVE-2026-11856)
* curl: curl: Insecure connection establishment due to TLS configuration mismatch (CVE-2026-8286)
* curl: curl: Man-in-the-middle attack via SSH host key bypass (CVE-2026-9547)
* curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect (CVE-2026-3783)
* curl: curl: Unauthorized access due to improper HTTP proxy connection reuse (CVE-2026-3784)
* curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication (CVE-2026-1965)
* curl: libcurl: Unauthorized connection reuse due to a logical error (CVE-2026-8458)
* curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse (CVE-2026-5545)
* curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP (CVE-2026-12064)
* curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse (CVE-2026-7168)
* curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies (CVE-2026-6253)
* jbcs-httpd24-httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355)
* jbcs-httpd24-httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536)
* jbcs-httpd24-httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server (CVE-2026-44186)
* jbcs-httpd24-httpd: Apache HTTP Server - Cross-site scripting in mod_proxy_ftp HTML directory list generation (CVE-2026-29170)
* jbcs-httpd24-httpd: jbcs-httpd24-mod_http2: Apache HTTP Server - Out-of-bounds Read in mod_headers and mod_mime with multiple response languages (CVE-2026-43951)
* jbcs-httpd24-httpd: Apache HTTP Server - Improper Privilege Management allowing .htaccess authors to read files as httpd user (CVE-2026-44119)
* jbcs-httpd24-httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
* jbcs-httpd24-httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server (CVE-2026-44186)
* jbcs-httpd24-httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356)
A Red Hat Security Bulletin which addresses further details about this flaw is available in the References section.
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers. These issues lead to HTTP response splitting. This CVE provides a "complete" fix for CVE-2023-38709.
6.8 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A Server-side request forgery (SSRF) vulnerability exists in Apache httpd when the server has mod_proxy loaded and is configured with mod_headers to modify the Content-Type header in the HTTP request or response using a value supplied by the user. Under this configuration, this flaw allows an attacker to craft specially crafted requests to manipulate the Content-Type header and trigger outbound requests to arbitrary attacker-controlled URLs via proxy. The vulnerability stems from inadequate input validation and unsafe header manipulation, ultimately allowing an attacker to influence server-side network behavior.
5.4 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in curl. When an application uses libcurl to make multiple Negotiate-authenticated HTTP or HTTPS requests to the same server with different credentials, libcurl may incorrectly reuse an existing connection. This logical error can cause a subsequent request to be sent using the authentication of a previous user, leading to an authentication bypass.
6.8 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in curl. When an OAuth2 bearer token is used for an HTTP(S) transfer that redirects to a second URL, curl could unintentionally leak the token. This occurs if the second hostname has entries in the `.netrc` file, allowing the bearer token intended for the first host to be sent to the redirected host. This information disclosure could allow an attacker to gain unauthorized access.
5.7 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in curl. This vulnerability allows curl to wrongly reuse an existing HTTP proxy connection when performing a CONNECT request to a server, even if the new request uses different authentication credentials for the HTTP proxy. This improper connection reuse could lead to an attacker gaining unauthorized access to resources or information intended for a different user.
6.5 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in curl. When curl is configured to use distinct proxies for different URL schemes, a redirect from a URL using an authenticated proxy to one using an unauthenticated proxy can inadvertently expose the initial proxy's credentials. This improper credential management (CWE-522) may allow an attacker to gain unauthorized access or information by intercepting these disclosed credentials.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in libcurl. When a user performs a transfer over an HTTP proxy using Digest authentication and then reuses the same handle for a second transfer with a different proxy host, libcurl incorrectly sends the `Proxy-Authorization` header intended for the first proxy to the second proxy. This could lead to the disclosure of sensitive authentication information to an unintended proxy, potentially allowing an attacker to gain unauthorized access or impersonate the user.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in curl. When a new data transfer attempts to upgrade its connection using STARTTLS, it may incorrectly reuse an existing live connection. This reuse can occur even if the Transport Layer Security (TLS) configuration of the new transfer does not match the existing connection, potentially leading to an insecure connection being established.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different service, potentially leading to unauthorized access or information disclosure.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in curl's cookie parsing logic. A malicious HTTP server can exploit this by setting 'super cookies' that bypass the Public Suffix List check. This allows an attacker-controlled origin to inject cookies that curl then transmits to unrelated third-party domains, leading to compromising request integrity.
6.5 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in libcurl. When reusing a libcurl handle for sequential transfers with environment-variable proxy configuration, the library does not properly clear the proxy authentication state. This oversight can lead to the unintended disclosure of `Proxy-Authorization` headers to an incorrect proxy, potentially exposing sensitive authentication information to an unauthorized entity. This is an information disclosure vulnerability.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in curl. The libcurl library, used for transferring data with URLs, could improperly reuse existing network connections. This occurred even when changes to mutual Transport Layer Security (mTLS) settings, particularly those for client certificates, should have prevented such reuse. This issue could lead to a security feature bypass, where a client might use a connection with an unintended or weaker security configuration, potentially compromising the integrity or confidentiality of data.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in curl. When libcurl is instructed to clear proxy authentication credentials, it fails to do so, leaving the old credentials available. This could lead to the unintended reuse of sensitive proxy authentication credentials for subsequent network transfers, potentially resulting in unauthorized access or information disclosure.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in libcurl. An attacker can exploit this by replacing a legitimate HTTP/3 server with an impostor machine. When libcurl attempts a second transfer to the same site with a cached SSL session and early data enabled, it may send sensitive request data before verifying the server's certificate. This could lead to the disclosure of sensitive information to the attacker.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in curl. When a libcurl-based application uses SCP:// or SFTP:// for transfers and employs the CURLOPT_SSH_KEYFUNCTION callback, it may silently accept an untrusted server. This occurs if the server's host key type differs from the one stored in the known_hosts file. The callback mechanism fails to enforce the host key restriction, enabling a connection to an untrusted server and risking a man-in-the-middle attack.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in libcurl. This use-after-free vulnerability occurs when an application configures an HTTP/2 stream-dependency tree and then performs a sequence of operations involving `curl_easy_reset()` and `curl_easy_cleanup()`. During the final cleanup, libcurl attempts to access memory that has already been released. This can lead to application crashes, resulting in a Denial of Service (DoS).
4.7 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in curl. When a user invokes curl with a schemeless URL and specifies SFTP (SSH File Transfer Protocol) or SCP (Secure Copy Protocol) as the default protocol, the tool layer fails to initialize critical SSH security options. This bypasses host verification, allowing curl to connect to an unverified SSH remote host without alerting the user. This could enable an attacker to intercept or manipulate data through a man-in-the-middle attack.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Apache HTTP Server. This escalation of privilege vulnerability allows local attackers, specifically those with the ability to author .htaccess files, to read sensitive files. This flaw enables unauthorized access to files with the privileges of the httpd user, potentially leading to information disclosure.
5.5 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Apache HTTP Server when using the `mod_ldap` module in a per-directory configuration. This use-after-free vulnerability allows a remote attacker to potentially execute arbitrary code or cause a denial of service (DoS) due to improper memory handling. This could lead to system instability or unauthorized control over the affected server.
4.6 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in Apache HTTP Server, specifically within the `mod_proxy_ftp` module. This cross-site scripting (XSS) vulnerability occurs during the generation of HTML directory lists when the server is configured to list FTP directory contents via either a forward or reverse proxy. An attacker could exploit this by injecting malicious scripts into web pages, which could lead to information disclosure or unauthorized actions when viewed by other users.
5.4 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
A vulnerability has been identified in the Apache HTTP Server. If the server is configured to connect to a malicious or compromised backend server, an attacker could exploit this flaw to bypass security controls or run unauthorized code on the system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Apache HTTP Server. This heap-based buffer overflow vulnerability can be exploited by a malicious backend server when using ProxyPassReverseCookie* directives. This could lead to a denial of service (DoS) condition, making the server unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `mod_dav_fs` module of Apache HTTP Server. A WebDAV (Web Distributed Authoring and Versioning) content author could exploit a path handling issue to directly manipulate trusted DAV property databases. This manipulation could potentially lead to child process crashes, resulting in a Denial of Service (DoS).
6.5 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Apache HTTP Server, specifically within the mod_xml2enc module. This heap-based buffer overflow vulnerability can be triggered when processing untrusted content through the xml2StartParse function. A remote attacker could potentially exploit this to cause a denial of service, information disclosure, or possibly arbitrary code execution.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when `mod_headers` and `mod_mime` are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service.
6.5 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Apache HTTP Server. This improper privilege management vulnerability allows local .htaccess authors to read files with the privileges of the httpd user. This could lead to unauthorized information disclosure.
5.5 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Apache HTTP Server. This buffer over-read vulnerability occurs when the server processes outbound Online Certificate Status Protocol (OCSP) requests directed to an attacker-controlled OCSP server. This could allow a remote attacker to read sensitive information from memory or cause a denial of service.
7.3 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `mod_proxy_ftp` module of the Apache HTTP Server. A remote attacker, by controlling a backend File Transfer Protocol (FTP) server, can trigger an infinite loop. This vulnerability, categorized as a Loop with Unreachable Exit Condition, leads to a Denial of Service (DoS) for the affected server.
7.3 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Apache HTTP Server. This buffer underwrite vulnerability occurs when processing crafted regular expressions in the server's configuration. An attacker could potentially exploit this to cause a denial of service.
7.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Apache HTTP Server's mod_http2 module. This vulnerability, known as a Use After Free, occurs when the server's file handles are exhausted. An attacker could potentially exploit this to cause a denial of service or, in some cases, execute arbitrary code, leading to system compromise.
7.3 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Core Services 2.4.62.SP5
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
194 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Core Services Apache HTTP Server 2.4.62 Service Pack 5 is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products and packaged under Red Hat JBoss Core Services, to allow for faster distribution of updates and for a more consistent update experience.\n\nThis release of Red Hat JBoss Core Services Apache HTTP Server 2.4.62 Service Pack 5 serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.62 Service Pack 4, and includes bug fixes and enhancements, which are documented in the Release Notes linked to in the References section.\n\nSecurity Fix(es):\n\n* jbcs-httpd24-httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516)\n* jbcs-httpd24-httpd: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation (CVE-2026-24072)\n* jbcs-httpd24-mod_http2: Apache HTTP Server mod_http2: Use After Free vulnerability allows arbitrary code execution or denial of service (CVE-2026-48913)\n* libcurl-1.dll: libcurl: Information disclosure via cached SSL session and early data (CVE-2026-9545)\n* libcurl-1.dll: libcurl: Security feature bypass due to improper mTLS connection reuse (CVE-2026-8932)\n* libcurl-1.dll: libcurl: Information disclosure due to failure to clear proxy authentication credentials (CVE-2026-9079)\n* libcurl-1.dll: libcurl: Information disclosure due to uncleared proxy authentication state (CVE-2026-8927)\n* libcurl-1.dll: libcurl: Use-after-free vulnerability leading to Denial of Service (CVE-2026-10536)\n* jbcs-httpd24-httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration (CVE-2026-29167)\n* jbcs-httpd24-httpd: Apache httpd mod_dav_fs: Denial of Service due to path handling issue (CVE-2026-42535)\n* jbcs-httpd24-httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631)\n* jbcs-httpd24-httpd: SSRF in Apache HTTP Server with mod_proxy loaded (CVE-2024-43204)\n* curl: curl: Cookie injection via malicious HTTP server using super cookies (CVE-2026-8924)\n* curl: curl: Information disclosure via incorrect Digest authentication header reuse (CVE-2026-11856)\n* curl: curl: Insecure connection establishment due to TLS configuration mismatch (CVE-2026-8286)\n* curl: curl: Man-in-the-middle attack via SSH host key bypass (CVE-2026-9547)\n* curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect (CVE-2026-3783)\n* curl: curl: Unauthorized access due to improper HTTP proxy connection reuse (CVE-2026-3784)\n* curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication (CVE-2026-1965)\n* curl: libcurl: Unauthorized connection reuse due to a logical error (CVE-2026-8458)\n* curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse (CVE-2026-5545)\n* curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP (CVE-2026-12064)\n* curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse (CVE-2026-7168)\n* curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies (CVE-2026-6253)\n* jbcs-httpd24-httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355)\n* jbcs-httpd24-httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536)\n* jbcs-httpd24-httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server (CVE-2026-44186)\n* jbcs-httpd24-httpd: Apache HTTP Server - Cross-site scripting in mod_proxy_ftp HTML directory list generation (CVE-2026-29170)\n* jbcs-httpd24-httpd: jbcs-httpd24-mod_http2: Apache HTTP Server - Out-of-bounds Read in mod_headers and mod_mime with multiple response languages (CVE-2026-43951)\n* jbcs-httpd24-httpd: Apache HTTP Server - Improper Privilege Management allowing .htaccess authors to read files as httpd user (CVE-2026-44119)\n* jbcs-httpd24-httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185)\n* jbcs-httpd24-httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server (CVE-2026-44186)\n* jbcs-httpd24-httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356)\n\nA Red Hat Security Bulletin which addresses further details about this flaw is available in the References section.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:56869",
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_core_services/2.4.62/html/red_hat_jboss_core_services_apache_http_server_2.4.62_service_pack_5_release_notes/index",
"url": "https://docs.redhat.com/en/documentation/red_hat_jboss_core_services/2.4.62/html/red_hat_jboss_core_services_apache_http_server_2.4.62_service_pack_5_release_notes/index"
},
{
"category": "external",
"summary": "2374549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2374549"
},
{
"category": "external",
"summary": "2374553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2374553"
},
{
"category": "external",
"summary": "2464941",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464941"
},
{
"category": "external",
"summary": "2486394",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486394"
},
{
"category": "external",
"summary": "2486395",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486395"
},
{
"category": "external",
"summary": "2486397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486397"
},
{
"category": "external",
"summary": "2486399",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486399"
},
{
"category": "external",
"summary": "2486402",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486402"
},
{
"category": "external",
"summary": "2486405",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486405"
},
{
"category": "external",
"summary": "2486406",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486406"
},
{
"category": "external",
"summary": "2486411",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486411"
},
{
"category": "external",
"summary": "2486414",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486414"
},
{
"category": "external",
"summary": "2486415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486415"
},
{
"category": "external",
"summary": "2486416",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486416"
},
{
"category": "external",
"summary": "2486419",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486419"
},
{
"category": "external",
"summary": "2496756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496756"
},
{
"category": "external",
"summary": "2496759",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496759"
},
{
"category": "external",
"summary": "2496766",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496766"
},
{
"category": "external",
"summary": "2496769",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496769"
},
{
"category": "external",
"summary": "2496771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496771"
},
{
"category": "external",
"summary": "JBCS-2284",
"url": "https://issues.redhat.com/browse/JBCS-2284"
},
{
"category": "external",
"summary": "JBCS-2285",
"url": "https://issues.redhat.com/browse/JBCS-2285"
},
{
"category": "external",
"summary": "JBCS-2286",
"url": "https://issues.redhat.com/browse/JBCS-2286"
},
{
"category": "external",
"summary": "JBCS-2287",
"url": "https://issues.redhat.com/browse/JBCS-2287"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56869.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP5 security update",
"tracking": {
"current_release_date": "2026-08-26T18:16:20+00:00",
"generator": {
"date": "2026-08-26T18:16:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:56869",
"initial_release_date": "2026-08-19T13:28:18+00:00",
"revision_history": [
{
"date": "2026-08-19T13:28:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-19T18:13:05+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-26T18:16:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Core Services 2.4.62.SP5",
"product": {
"name": "Red Hat JBoss Core Services 2.4.62.SP5",
"product_id": "Red Hat JBoss Core Services 2.4.62.SP5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-42516",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2025-06-24T12:01:28.570000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2374549"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers. These issues lead to HTTP response splitting. This CVE provides a \"complete\" fix for CVE-2023-38709.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: incomplete fix for CVE-2023-38709",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is only exploitable by a malicious backend or a malicious application, but may also affect forward proxy configurations.\n\nThis issue is classified as a Moderate vulnerability because successful exploitation requires a highly specific and constrained setup. Namely, the attacker must already have the ability to influence backend responses\u2014such as injecting malicious headers like Content-Type or Content-Encoding\u2014which typically implies a compromised or poorly controlled upstream service. In properly configured systems, frontend servers like Apache sanitize or strictly validate backend output, limiting exposure. Furthermore, HTTP response splitting does not inherently lead to remote code execution or privilege escalation on the server itself; instead, its effects are typically confined to manipulating client-side behavior such as caching or redirection.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-42516"
},
{
"category": "external",
"summary": "RHBZ#2374549",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2374549"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-42516",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-42516"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-42516",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42516"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2025-07-14T07:13:28.880000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: incomplete fix for CVE-2023-38709"
},
{
"cve": "CVE-2024-43204",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2025-06-24T12:09:27.933000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2374553"
}
],
"notes": [
{
"category": "description",
"text": "A Server-side request forgery (SSRF) vulnerability exists in Apache httpd when the server has mod_proxy loaded and is configured with mod_headers to modify the Content-Type header in the HTTP request or response using a value supplied by the user. Under this configuration, this flaw allows an attacker to craft specially crafted requests to manipulate the Content-Type header and trigger outbound requests to arbitrary attacker-controlled URLs via proxy. The vulnerability stems from inadequate input validation and unsafe header manipulation, ultimately allowing an attacker to influence server-side network behavior.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: SSRF in Apache HTTP Server with mod_proxy loaded",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires a non-default and uncommon server configuration where mod_headers is configured to modify the Content-Type request or a response header with a value provided in the HTTP request.\n\nThis issue is rated as a Moderate vulnerability primarily due to its reliance on a non-default and uncommon server configuration, which significantly limits its exploitability. Specifically, successful exploitation requires the Apache HTTP Server to have both mod_proxy and mod_headers enabled, and for mod_headers to be explicitly misconfigured to set or modify the Content-Type header using unvalidated user input\u2014a rare and generally discouraged setup. Moreover, the SSRF does not result in information disclosure, privilege escalation, or code execution, but merely allows outbound connections from the server to attacker-controlled endpoints.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43204"
},
{
"category": "external",
"summary": "RHBZ#2374553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2374553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43204",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43204"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43204",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43204"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2025-07-14T07:14:13.801000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: SSRF in Apache HTTP Server with mod_proxy loaded"
},
{
"cve": "CVE-2026-1965",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-03-11T11:00:54.752485+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446448"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. When an application uses libcurl to make multiple Negotiate-authenticated HTTP or HTTPS requests to the same server with different credentials, libcurl may incorrectly reuse an existing connection. This logical error can cause a subsequent request to be sent using the authentication of a previous user, leading to an authentication bypass.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1965"
},
{
"category": "external",
"summary": "RHBZ#2446448",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446448"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1965",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1965"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1965",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1965"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-1965.html",
"url": "https://curl.se/docs/CVE-2026-1965.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-1965.json",
"url": "https://curl.se/docs/CVE-2026-1965.json"
}
],
"release_date": "2026-03-11T10:08:52.431000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication"
},
{
"cve": "CVE-2026-3783",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-03-11T11:01:01.429907+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446450"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. When an OAuth2 bearer token is used for an HTTP(S) transfer that redirects to a second URL, curl could unintentionally leak the token. This occurs if the second hostname has entries in the `.netrc` file, allowing the bearer token intended for the first host to be sent to the redirected host. This information disclosure could allow an attacker to gain unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-3783"
},
{
"category": "external",
"summary": "RHBZ#2446450",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446450"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-3783",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3783"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/03/11/2",
"url": "http://www.openwall.com/lists/oss-security/2026/03/11/2"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-3783.html",
"url": "https://curl.se/docs/CVE-2026-3783.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-3783.json",
"url": "https://curl.se/docs/CVE-2026-3783.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3583983",
"url": "https://hackerone.com/reports/3583983"
}
],
"release_date": "2026-03-11T10:09:08.746000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "To prevent the leakage of OAuth2 bearer tokens, ensure that `.netrc` files are carefully managed. Avoid configuring `.netrc` entries for untrusted or unknown hostnames, particularly when `curl` is used with OAuth2 bearer tokens and is configured to follow redirects. Regularly review and restrict the scope of credentials stored in `.netrc` files to only explicitly trusted destinations.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect"
},
{
"cve": "CVE-2026-3784",
"cwe": {
"id": "CWE-305",
"name": "Authentication Bypass by Primary Weakness"
},
"discovery_date": "2026-03-11T11:00:57.752827+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446449"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. This vulnerability allows curl to wrongly reuse an existing HTTP proxy connection when performing a CONNECT request to a server, even if the new request uses different authentication credentials for the HTTP proxy. This improper connection reuse could lead to an attacker gaining unauthorized access to resources or information intended for a different user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Unauthorized access due to improper HTTP proxy connection reuse",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-3784"
},
{
"category": "external",
"summary": "RHBZ#2446449",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446449"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-3784",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3784"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3784",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3784"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/03/11/3",
"url": "http://www.openwall.com/lists/oss-security/2026/03/11/3"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-3784.html",
"url": "https://curl.se/docs/CVE-2026-3784.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-3784.json",
"url": "https://curl.se/docs/CVE-2026-3784.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3584903",
"url": "https://hackerone.com/reports/3584903"
}
],
"release_date": "2026-03-11T10:09:21.418000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: curl: Unauthorized access due to improper HTTP proxy connection reuse"
},
{
"cve": "CVE-2026-6253",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-04-23T16:35:33.623000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461202"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. When curl is configured to use distinct proxies for different URL schemes, a redirect from a URL using an authenticated proxy to one using an unauthenticated proxy can inadvertently expose the initial proxy\u0027s credentials. This improper credential management (CWE-522) may allow an attacker to gain unauthorized access or information by intercepting these disclosed credentials.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: This flaw in curl and libcurl allows proxy credentials to be inadvertently exposed to a second proxy during a redirect. This issue arises when curl is configured to use distinct proxies for different URL schemes, the initial proxy requires authentication, and a subsequent proxy does not. Red Hat products utilizing curl or libcurl in such a specific proxy chaining configuration may be affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6253"
},
{
"category": "external",
"summary": "RHBZ#2461202",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461202"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6253",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6253"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6253",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6253"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-6253.html",
"url": "https://curl.se/docs/CVE-2026-6253.html"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid configuring curl or libcurl to use proxies that require credentials. This prevents the scenario where credentials for a first proxy could be inadvertently passed to a second proxy during a redirect.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies"
},
{
"cve": "CVE-2026-7168",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-05-13T10:01:12.117148+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476979"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. When a user performs a transfer over an HTTP proxy using Digest authentication and then reuses the same handle for a second transfer with a different proxy host, libcurl incorrectly sends the `Proxy-Authorization` header intended for the first proxy to the second proxy. This could lead to the disclosure of sensitive authentication information to an unintended proxy, potentially allowing an attacker to gain unauthorized access or impersonate the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: A flaw in libcurl allows for information disclosure when a client reuses a handle for HTTP proxy transfers. If a libcurl application uses Digest authentication with one proxy and then connects to a different proxy using the same handle, the `Proxy-Authorization` header from the initial connection may be inadvertently sent to the second proxy, potentially exposing sensitive authentication data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-7168"
},
{
"category": "external",
"summary": "RHBZ#2476979",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476979"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-7168",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7168"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-7168",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7168"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/04/29/14",
"url": "http://www.openwall.com/lists/oss-security/2026/04/29/14"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-7168.html",
"url": "https://curl.se/docs/CVE-2026-7168.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-7168.json",
"url": "https://curl.se/docs/CVE-2026-7168.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3697719",
"url": "https://hackerone.com/reports/3697719"
}
],
"release_date": "2026-05-13T08:29:08.900000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications using libcurl should avoid reusing handles when switching between different HTTP proxies, especially after performing Digest authentication. This operational control prevents the unintended disclosure of `Proxy-Authorization` headers to subsequent proxy hosts.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse"
},
{
"cve": "CVE-2026-8286",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-07-03T07:01:27.043110+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496763"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. When a new data transfer attempts to upgrade its connection using STARTTLS, it may incorrectly reuse an existing live connection. This reuse can occur even if the Transport Layer Security (TLS) configuration of the new transfer does not match the existing connection, potentially leading to an insecure connection being established.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Insecure connection establishment due to TLS configuration mismatch",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw as `curl` may establish an insecure connection when attempting to upgrade a transfer with STARTTLS, potentially reusing an existing connection with mismatched TLS configurations. This could lead to unexpected data exposure or compromise, particularly in environments where `curl` is used for sensitive data transfers and relies on STARTTLS for security.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-8286"
},
{
"category": "external",
"summary": "RHBZ#2496763",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496763"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-8286",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8286"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-8286",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8286"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8286.html",
"url": "https://curl.se/docs/CVE-2026-8286.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8286.json",
"url": "https://curl.se/docs/CVE-2026-8286.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3718195",
"url": "https://hackerone.com/reports/3718195"
}
],
"release_date": "2026-07-03T06:14:17.541000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "curl: curl: Insecure connection establishment due to TLS configuration mismatch"
},
{
"cve": "CVE-2026-8458",
"cwe": {
"id": "CWE-305",
"name": "Authentication Bypass by Primary Weakness"
},
"discovery_date": "2026-07-03T07:01:30.042181+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496764"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different service, potentially leading to unauthorized access or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: libcurl: Unauthorized connection reuse due to a logical error",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in libcurl where a logical error in connection pooling can lead to unauthorized connection reuse. When an application uses Negotiate authentication with different service names on the same hostname and port, libcurl might incorrectly reuse an existing authenticated connection for an unintended service. This could result in information disclosure or unauthorized access to resources, bypassing intended service isolation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-8458"
},
{
"category": "external",
"summary": "RHBZ#2496764",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496764"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-8458",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8458"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-8458",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8458"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8458.html",
"url": "https://curl.se/docs/CVE-2026-8458.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8458.json",
"url": "https://curl.se/docs/CVE-2026-8458.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3721183",
"url": "https://hackerone.com/reports/3721183"
}
],
"release_date": "2026-07-03T06:14:42.258000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "curl: libcurl: Unauthorized connection reuse due to a logical error"
},
{
"cve": "CVE-2026-8924",
"cwe": {
"id": "CWE-565",
"name": "Reliance on Cookies without Validation and Integrity Checking"
},
"discovery_date": "2026-07-03T07:01:32.981435+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496765"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl\u0027s cookie parsing logic. A malicious HTTP server can exploit this by setting \u0027super cookies\u0027 that bypass the Public Suffix List check. This allows an attacker-controlled origin to inject cookies that curl then transmits to unrelated third-party domains, leading to compromising request integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Cookie injection via malicious HTTP server using super cookies",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: Red Hat rates this flaw Moderate (CVSS 6.5) compared to CISA\u0027s Critical (9.1). The scoring difference is due to two factors: first, exploitation requires the victim\u0027s curl to connect using a trailing-dot hostname (e.g., https://example.co.uk.), a format that is uncommon in practice and incompatible with TLS SNI; second, the direct impact is cookie injection into outbound requests \u2014 not exfiltration of victim data to the attacker. The curl project itself rates this flaw Low severity. Red Hat products that use curl for HTTP communication are affected, but the trailing-dot precondition significantly limits real-world exploitability. This flaw has not been shown to enable impacts beyond session integrity modification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-8924"
},
{
"category": "external",
"summary": "RHBZ#2496765",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496765"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-8924",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8924"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-8924",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8924"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8924.html",
"url": "https://curl.se/docs/CVE-2026-8924.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8924.json",
"url": "https://curl.se/docs/CVE-2026-8924.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3733905",
"url": "https://hackerone.com/reports/3733905"
}
],
"release_date": "2026-07-03T06:15:04.646000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "Do not use trailing-dot hostnames in URLs passed to curl. Trailing dots are uncommon and incompatible with TLS SNI. Upgrade to curl 8.21.0 to resolve",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: curl: Cookie injection via malicious HTTP server using super cookies"
},
{
"cve": "CVE-2026-8927",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-07-03T07:01:44.730187+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496769"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. When reusing a libcurl handle for sequential transfers with environment-variable proxy configuration, the library does not properly clear the proxy authentication state. This oversight can lead to the unintended disclosure of `Proxy-Authorization` headers to an incorrect proxy, potentially exposing sensitive authentication information to an unauthorized entity. This is an information disclosure vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Information disclosure due to uncleared proxy authentication state",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure vulnerability in libcurl arises when a handle is reused for sequential transfers with environment-variable proxy configurations, failing to clear the proxy authentication state. This oversight can lead to `Proxy-Authorization` headers being inadvertently sent to an incorrect proxy, potentially exposing sensitive authentication information in Red Hat environments utilizing multiple proxy configurations. This flaw leads only to a confidentiality impact. There has been no observed integrity impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-8927"
},
{
"category": "external",
"summary": "RHBZ#2496769",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496769"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-8927",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8927"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-8927",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8927"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8927.html",
"url": "https://curl.se/docs/CVE-2026-8927.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8927.json",
"url": "https://curl.se/docs/CVE-2026-8927.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3744543",
"url": "https://hackerone.com/reports/3744543"
}
],
"release_date": "2026-07-03T06:16:06.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications utilizing libcurl should avoid reusing handles when switching between different proxy configurations. This operational control prevents the unintended leakage of `Proxy-Authorization` headers to incorrect proxies.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "curl: Information disclosure due to uncleared proxy authentication state"
},
{
"cve": "CVE-2026-8932",
"cwe": {
"id": "CWE-1025",
"name": "Comparison Using Wrong Factors"
},
"discovery_date": "2026-07-03T07:01:15.122562+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496759"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. The libcurl library, used for transferring data with URLs, could improperly reuse existing network connections. This occurred even when changes to mutual Transport Layer Security (mTLS) settings, particularly those for client certificates, should have prevented such reuse. This issue could lead to a security feature bypass, where a client might use a connection with an unintended or weaker security configuration, potentially compromising the integrity or confidentiality of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security feature bypass in libcurl where mTLS connection reuse may occur despite changes to client certificate settings. This could lead to applications using libcurl with mTLS to inadvertently use a less secure connection than intended, potentially compromising data confidentiality or integrity. This issue primarily affects applications that dynamically alter mTLS client certificate configurations and reuse connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-8932"
},
{
"category": "external",
"summary": "RHBZ#2496759",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496759"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-8932",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8932"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-8932",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8932"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8932.html",
"url": "https://curl.se/docs/CVE-2026-8932.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-8932.json",
"url": "https://curl.se/docs/CVE-2026-8932.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3733910",
"url": "https://hackerone.com/reports/3733910"
}
],
"release_date": "2026-07-03T06:16:30.485000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse"
},
{
"cve": "CVE-2026-9079",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2026-07-03T07:01:50.605956+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496771"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. When libcurl is instructed to clear proxy authentication credentials, it fails to do so, leaving the old credentials available. This could lead to the unintended reuse of sensitive proxy authentication credentials for subsequent network transfers, potentially resulting in unauthorized access or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in libcurl\u0027s proxy authentication credential management can lead to information disclosure. There are no integrity or availability risks posed by this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9079"
},
{
"category": "external",
"summary": "RHBZ#2496771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496771"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9079",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9079"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9079",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9079"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-9079.html",
"url": "https://curl.se/docs/CVE-2026-9079.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-9079.json",
"url": "https://curl.se/docs/CVE-2026-9079.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3750295",
"url": "https://hackerone.com/reports/3750295"
}
],
"release_date": "2026-07-03T06:16:51.127000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials"
},
{
"cve": "CVE-2026-9545",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-07-03T07:01:06.296643+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. An attacker can exploit this by replacing a legitimate HTTP/3 server with an impostor machine. When libcurl attempts a second transfer to the same site with a cached SSL session and early data enabled, it may send sensitive request data before verifying the server\u0027s certificate. This could lead to the disclosure of sensitive information to the attacker.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libcurl: libcurl: Information disclosure via cached SSL session and early data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The version of curl as shipped with Red Hat Enterprise Linux 10 is not built with the support for the ngtcp2 + nghttp3 backend and is therefore unaffected by this issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9545"
},
{
"category": "external",
"summary": "RHBZ#2496756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9545",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9545"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9545",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9545"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-9545.html",
"url": "https://curl.se/docs/CVE-2026-9545.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-9545.json",
"url": "https://curl.se/docs/CVE-2026-9545.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3752888",
"url": "https://hackerone.com/reports/3752888"
}
],
"release_date": "2026-07-03T06:17:55.931000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libcurl: libcurl: Information disclosure via cached SSL session and early data"
},
{
"cve": "CVE-2026-9547",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-07-03T07:01:12.182841+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496758"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. When a libcurl-based application uses SCP:// or SFTP:// for transfers and employs the CURLOPT_SSH_KEYFUNCTION callback, it may silently accept an untrusted server. This occurs if the server\u0027s host key type differs from the one stored in the known_hosts file. The callback mechanism fails to enforce the host key restriction, enabling a connection to an untrusted server and risking a man-in-the-middle attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Man-in-the-middle attack via SSH host key bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw where libcurl-based applications performing SCP or SFTP transfers with the CURLOPT_SSH_KEYFUNCTION callback may silently accept an untrusted server. This occurs when a server presents a host key type that differs from the one recorded in the known_hosts file, bypassing a critical host key verification and enabling potential man-in-the-middle attacks. The vulnerability requires specific application callback usage, not a general curl client default.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9547"
},
{
"category": "external",
"summary": "RHBZ#2496758",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496758"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9547",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9547"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9547",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9547"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-9547.html",
"url": "https://curl.se/docs/CVE-2026-9547.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-9547.json",
"url": "https://curl.se/docs/CVE-2026-9547.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3751712",
"url": "https://hackerone.com/reports/3751712"
}
],
"release_date": "2026-07-03T06:18:44.499000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "curl: curl: Man-in-the-middle attack via SSH host key bypass"
},
{
"cve": "CVE-2026-10536",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-07-03T07:01:35.911244+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496766"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. This use-after-free vulnerability occurs when an application configures an HTTP/2 stream-dependency tree and then performs a sequence of operations involving `curl_easy_reset()` and `curl_easy_cleanup()`. During the final cleanup, libcurl attempts to access memory that has already been released. This can lead to application crashes, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact use-after-free flaw in libcurl can lead to application crashes and Denial of Service. It occurs when an application specifically configures an HTTP/2 stream-dependency tree and then performs a precise sequence of `curl_easy_reset()` and `curl_easy_cleanup()` operations, attempting to access already freed memory. This vulnerability requires a specific application programming pattern, limiting its exploitability in typical Red Hat deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10536"
},
{
"category": "external",
"summary": "RHBZ#2496766",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496766"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10536",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10536"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10536",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10536"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-10536.html",
"url": "https://curl.se/docs/CVE-2026-10536.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-10536.json",
"url": "https://curl.se/docs/CVE-2026-10536.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3751697",
"url": "https://hackerone.com/reports/3751697"
}
],
"release_date": "2026-07-03T06:11:15.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid configuring HTTP/2 stream dependencies within applications utilizing libcurl. This functionality is considered deprecated and its use is required to trigger the vulnerability.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service"
},
{
"cve": "CVE-2026-12064",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-07-03T07:01:41.779195+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496768"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl. When a user invokes curl with a schemeless URL and specifies SFTP (SSH File Transfer Protocol) or SCP (Secure Copy Protocol) as the default protocol, the tool layer fails to initialize critical SSH security options. This bypasses host verification, allowing curl to connect to an unverified SSH remote host without alerting the user. This could enable an attacker to intercept or manipulate data through a man-in-the-middle attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in curl allows an attacker to bypass SSH host verification when a user invokes curl with a schemeless URL and specifies SFTP or SCP as the default protocol. This can lead to man-in-the-middle attacks, enabling data interception or manipulation without user awareness in Red Hat environments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12064"
},
{
"category": "external",
"summary": "RHBZ#2496768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496768"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12064",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12064"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12064",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12064"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-12064.html",
"url": "https://curl.se/docs/CVE-2026-12064.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-12064.json",
"url": "https://curl.se/docs/CVE-2026-12064.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3797526",
"url": "https://hackerone.com/reports/3797526"
}
],
"release_date": "2026-07-03T06:13:55.302000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid using the `--proto-default sftp` or `--proto-default scp` options with schemeless URLs when invoking the `curl` command. Instead, explicitly specify the protocol in the URL (e.g., `sftp://host/path` or `scp://host/path`).",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP"
},
{
"cve": "CVE-2026-24072",
"cwe": {
"id": "CWE-73",
"name": "External Control of File Name or Path"
},
"discovery_date": "2026-05-04T13:01:13.896013+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464941"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache HTTP Server. This escalation of privilege vulnerability allows local attackers, specifically those with the ability to author .htaccess files, to read sensitive files. This flaw enables unauthorized access to files with the privileges of the httpd user, potentially leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-24072"
},
{
"category": "external",
"summary": "RHBZ#2464941",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464941"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-24072",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24072"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-24072",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24072"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2026-05-04T12:37:57.673000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "To prevent local users from exploiting this flaw via .htaccess file manipulation, configure Apache HTTP Server to disable .htaccess overrides. Set `AllowOverride None` within the main server configuration or relevant `\u003cDirectory\u003e` blocks. This restricts the ability of local users to alter server settings. After applying this change, the `httpd` service must be reloaded or restarted for the new configuration to take effect.\n\nExample configuration:\n```\n\u003cDirectory \"/var/www/html\"\u003e\n AllowOverride None\n\u003c/Directory\u003e\n```\nTo apply changes, reload the service:\n`sudo systemctl reload httpd`\nOr restart the service:\n`sudo systemctl restart httpd`",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation"
},
{
"cve": "CVE-2026-29167",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-06-08T16:01:30.220956+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486394"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache HTTP Server when using the `mod_ldap` module in a per-directory configuration. This use-after-free vulnerability allows a remote attacker to potentially execute arbitrary code or cause a denial of service (DoS) due to improper memory handling. This could lead to system instability or unauthorized control over the affected server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "CISA\u0027s 9.8 is a mechanical worst-case UAF score. Their vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H \u2014 they\u0027re treating it as: \"network-facing service, memory corruption primitive, assume RCE.\" This is how CISA-ADP routinely scores any UAF in a network daemon. They don\u0027t analyze actual exploitability; they score the theoretical ceiling of the vulnerability class.\n\nApache\u0027s LOW reflects what actually happens. \n\n1. Trigger is narrow \u2014 mod_ldap must be loaded (not default) AND configured in per-directory context (\u003cDirectory\u003e, \u003cLocation\u003e, .htaccess). Server-wide LDAP config doesn\u0027t trigger it. This is an unusual configuration pattern.\n2. UAF in config merging, not request handling \u2014 the freed memory is in the per-directory configuration merge path, which constrains the timing window and what objects occupy the freed allocation. This isn\u0027t a heap spray-friendly UAF in a hot request path.\n3. httpd\u0027s process model kills RCE reliability \u2014 prefork uses separate processes (crash = one child dies, parent respawns), worker/event have per-process address space. Turning a UAF into reliable RCE against httpd is substantially harder than against a single-threaded daemon with a predictable heap layout.\n4. Realistic impact is DoS \u2014 the freed pointer will most likely cause a segfault (child crash), not a controlled write primitive. The parent process respawns workers, so even the DoS is transient.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29167"
},
{
"category": "external",
"summary": "RHBZ#2486394",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486394"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29167",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29167"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29167",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29167"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2026-06-08T15:07:59.231000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "upgrade apache web server to 2.4.68",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration"
},
{
"cve": "CVE-2026-29170",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-08T16:02:43.595491+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486419"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache HTTP Server, specifically within the `mod_proxy_ftp` module. This cross-site scripting (XSS) vulnerability occurs during the generation of HTML directory lists when the server is configured to list FTP directory contents via either a forward or reverse proxy. An attacker could exploit this by injecting malicious scripts into web pages, which could lead to information disclosure or unauthorized actions when viewed by other users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Apache HTTP Server: Cross-site scripting in mod_proxy_ftp via HTML directory list generation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact cross-site scripting (XSS) vulnerability in Apache HTTP Server\u0027s `mod_proxy_ftp` module requires specific server configurations to be exploitable. The flaw occurs when `mod_proxy_ftp` is enabled and configured to list FTP directory contents via a proxy, which is not a default setup in Red Hat Enterprise Linux. Successful exploitation depends on a user viewing a specially crafted web page, potentially leading to information disclosure or unauthorized actions within the user\u0027s browser context.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29170"
},
{
"category": "external",
"summary": "RHBZ#2486419",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486419"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29170",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29170"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29170",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29170"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2026-06-08T15:10:09.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: Apache HTTP Server: Cross-site scripting in mod_proxy_ftp via HTML directory list generation"
},
{
"cve": "CVE-2026-34355",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-06-08T16:02:27.677660+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486414"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability has been identified in the Apache HTTP Server. If the server is configured to connect to a malicious or compromised backend server, an attacker could exploit this flaw to bypass security controls or run unauthorized code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `mod_proxy_html` within the Apache HTTP Server allows an untrusted backend to trigger a buffer overflow. This could lead to a security bypass or arbitrary code execution, posing a significant risk in environments where `httpd` is configured with untrusted backend services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34355"
},
{
"category": "external",
"summary": "RHBZ#2486414",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486414"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34355",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34355"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34355",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34355"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2026-06-08T15:20:30.900000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "Disable the `mod_proxy_html` module if it is not essential for your Apache HTTP Server configuration. If `mod_proxy_html` is required, restrict its use to trusted backend servers only, employing network segmentation and access controls. After modifying the configuration, reload the httpd service for changes to apply, which may cause a brief service interruption.\n\nSteps to disable:\nOpen /etc/httpd/conf.modules.d/00-proxy.conf.\nAdd a # to comment out the line: LoadModule proxy_html_module modules/mod_proxy_html.so\nVerify configuration syntax: apachectl configtest\nApply the change gracefully: systemctl reload httpd",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass"
},
{
"cve": "CVE-2026-34356",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-06-08T16:01:32.651836+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486395"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache HTTP Server. This heap-based buffer overflow vulnerability can be exploited by a malicious backend server when using ProxyPassReverseCookie* directives. This could lead to a denial of service (DoS) condition, making the server unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in Apache could allow a malicious backend server to crash your web server, making it unavailable to users. Your system is only at risk if you use Apache to forward traffic to untrusted or unverified backend systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34356"
},
{
"category": "external",
"summary": "RHBZ#2486395",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486395"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34356",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34356"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34356",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34356"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2026-06-08T15:12:21.415000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "To prevent this denial-of-service flaw, ensure your Apache proxy rules only connect to highly trusted backend servers. If you must proxy traffic to unverified or external backends, disable the cookie-rewriting features.\n\nSteps to Mitigate:\n\nOpen your Apache configuration file (e.g., /etc/httpd/conf/httpd.conf).\nLocate and comment out any ProxyPassReverseCookieDomain or ProxyPassReverseCookiePath lines pointing to untrusted backends by adding a # at the start of the line.\nTest your syntax: apachectl configtest\nApply changes gracefully: systemctl reload httpd\nNote: This may cause a brief service interruption.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers"
},
{
"cve": "CVE-2026-42535",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-06-08T16:02:04.647650+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486406"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `mod_dav_fs` module of Apache HTTP Server. A WebDAV (Web Distributed Authoring and Versioning) content author could exploit a path handling issue to directly manipulate trusted DAV property databases. This manipulation could potentially lead to child process crashes, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Apache httpd mod_dav_fs: Denial of Service due to path handling issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42535"
},
{
"category": "external",
"summary": "RHBZ#2486406",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486406"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42535",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42535"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42535",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42535"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2026-06-08T15:14:49.189000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: Apache httpd mod_dav_fs: Denial of Service due to path handling issue"
},
{
"cve": "CVE-2026-42536",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-06-08T16:02:19.284204+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486411"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache HTTP Server, specifically within the mod_xml2enc module. This heap-based buffer overflow vulnerability can be triggered when processing untrusted content through the xml2StartParse function. A remote attacker could potentially exploit this to cause a denial of service, information disclosure, or possibly arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In Red Hat Enterprise Linux (RHEL), the httpd package includes mod_xml2enc, which provides encoding support for filters like mod_proxy_html. Because this flaw relies on processing unvetted or untrusted input text lengths, the impact presents a high risk to availability (Denial of Service via worker crashes) and a potential risk to confidentiality if an attacker is capable of executing remote code within the context of the apache or httpd daemon process.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42536"
},
{
"category": "external",
"summary": "RHBZ#2486411",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486411"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42536",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42536"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42536",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42536"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2026-06-08T15:23:46.290000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, disable the `mod_xml2enc` module if its functionality for XML internationalization is not essential. This can be done by commenting out the `LoadModule xml2enc_module modules/mod_xml2enc.so` directive in the Apache HTTP Server configuration. A service restart is required for the change to take effect.\n\n```bash\n# Edit the Apache configuration file, e.g., /etc/httpd/conf.modules.d/00-base.conf\n# Comment out the line:\n# LoadModule xml2enc_module modules/mod_xml2enc.so\n\n# Reload the httpd service\nsudo systemctl reload httpd\n```\n\n*Note: Disabling `mod_xml2enc` will cause any configurations relying heavily on `mod_proxy_html` or raw HTML/XML encoding conversions to function incorrectly or fail. Red Hat strongly recommends upgrading to a patched version of `httpd` as soon as it becomes available for your specific RHEL channel.*",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc"
},
{
"cve": "CVE-2026-43951",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-06-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486415"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when `mod_headers` and `mod_mime` are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact vulnerability in Apache HTTP Server arises from an out-of-bounds read when both `mod_headers` and `mod_mime` modules are active and configured for multiple response languages. While this configuration is not universally enabled by default in Red Hat products, affected systems could be vulnerable to information disclosure or denial of service if these specific modules and language settings are in use. Exploitation requires a remote attacker to trigger this specific module interaction.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43951"
},
{
"category": "external",
"summary": "RHBZ#2486415",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486415"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43951",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43951"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43951",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43951"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2026-06-08T15:16:14.594000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "- Those who do not require multi-language response headers can remove or disable the `mod_headers` and `mod_mime` modules, or remove Content-Language directives from their configuration. \n- Systems not using these modules in combination are not affected.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime"
},
{
"cve": "CVE-2026-44119",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2026-06-08T16:02:34.964516+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486416"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache HTTP Server. This improper privilege management vulnerability allows local .htaccess authors to read files with the privileges of the httpd user. This could lead to unauthorized information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Apache HTTP Server: Local .htaccess authors can read files with httpd user privileges",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44119"
},
{
"category": "external",
"summary": "RHBZ#2486416",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486416"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44119",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44119"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44119",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44119"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2026-06-08T15:17:31.939000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: Apache HTTP Server: Local .htaccess authors can read files with httpd user privileges"
},
{
"cve": "CVE-2026-44185",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-06-08T16:01:37.898883+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486397"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache HTTP Server. This buffer over-read vulnerability occurs when the server processes outbound Online Certificate Status Protocol (OCSP) requests directed to an attacker-controlled OCSP server. This could allow a remote attacker to read sensitive information from memory or cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A critical buffer over-read flaw in Apache HTTP Server occurs when it performs outbound OCSP requests. If a server connects to an attacker-controlled OCSP responder, a remote attacker can leak sensitive memory data or trigger a denial of service (DoS). This risk depends entirely on the server\u0027s OCSP configuration and endpoint trustworthiness.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44185"
},
{
"category": "external",
"summary": "RHBZ#2486397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486397"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44185",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44185"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44185",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44185"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2026-06-08T15:22:11.809000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that Apache HTTP Server is configured to only communicate with trusted OCSP responders. If OCSP validation or stapling is not a critical requirement for your deployment, consider disabling it. This can be achieved by adjusting mod_ssl directives in your Apache HTTP Server configuration. \n\nFor example, add or modify the following lines:\n\n~~~\nSSLOCSPEnable off\nSSLUseStapling off\n~~~\n\nAfter modifying the configuration, reload the httpd service for the changes to take effect safely without interrupting active connections:\n\n~~~\nsudo systemctl reload httpd\n~~~",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server"
},
{
"cve": "CVE-2026-44186",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-06-08T16:01:53.173507+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486402"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `mod_proxy_ftp` module of the Apache HTTP Server. A remote attacker, by controlling a backend File Transfer Protocol (FTP) server, can trigger an infinite loop. This vulnerability, categorized as a Loop with Unreachable Exit Condition, leads to a Denial of Service (DoS) for the affected server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A loop with an unreachable exit condition flaw was found in the mod_proxy_ftp module of the Apache HTTP Server. A remote attacker could exploit this vulnerability by tricking the server into connecting to a malicious or compromised backend FTP server, causing the proxy_ftp_handler component to enter an infinite loop. This results in CPU exhaustion and a denial of service (DoS) condition on the affected system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44186"
},
{
"category": "external",
"summary": "RHBZ#2486402",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486402"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44186"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2026-06-08T15:11:12.743000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "To mitigate this issue, you can disable the `mod_proxy_ftp` module if your environment does not require it.\n\n#### **Step 1: Disable the Module**\n\nOpen your Apache HTTP Server configuration file (commonly located at `/etc/httpd/conf.modules.d/00-proxy.conf` or `/etc/httpd/conf/httpd.conf`) and comment out or remove the following line:\n\n```\n# LoadModule proxy_ftp_module modules/mod_proxy_ftp.so\n```\n#### **Step 2: Restart the Service**\n\nRestart the `httpd` service to apply the configuration changes:\n```\nsystemctl restart httpd\n```\n**Note:** Disabling this module may impact applications or services that rely on Apache\u0027s FTP proxy functionality.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server"
},
{
"cve": "CVE-2026-44631",
"cwe": {
"id": "CWE-124",
"name": "Buffer Underwrite (\u0027Buffer Underflow\u0027)"
},
"discovery_date": "2026-06-08T16:01:43.891910+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486399"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache HTTP Server. This buffer underwrite vulnerability occurs when processing crafted regular expressions in the server\u0027s configuration. An attacker could potentially exploit this to cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Apache HTTP Server: Denial of Service via crafted regular expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact buffer underwrite flaw in Apache HTTP Server can lead to a denial of service. The vulnerability occurs when processing specially crafted regular expressions within the server\u0027s configuration. Exploitation requires a high attack complexity, indicating that specific conditions or a complex attack vector are necessary, thereby limiting the practical risk in typical Red Hat deployments where configuration changes are tightly controlled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44631"
},
{
"category": "external",
"summary": "RHBZ#2486399",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486399"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44631",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44631"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44631",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44631"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2026-06-08T15:19:23.570000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "Only loadtrustedApache configuration; the bug triggers oncrafted regexin config at start/reload (DirectoryMatch,Directory ~,ProxyMatch, etc.).\nKeep AllowOverride None where possible so untrusted users cannot inject regex via .htaccess.\nRestrict who can change httpdconfig and reload the service.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: Apache HTTP Server: Denial of Service via crafted regular expressions"
},
{
"cve": "CVE-2026-48913",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-06-08T16:02:01.682142+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486405"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Apache HTTP Server\u0027s mod_http2 module. This vulnerability, known as a Use After Free, occurs when the server\u0027s file handles are exhausted. An attacker could potentially exploit this to cause a denial of service or, in some cases, execute arbitrary code, leading to system compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_http2: Apache HTTP Server mod_http2: Use After Free vulnerability allows arbitrary code execution or denial of service.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A use-after-free vulnerability exists in the Apache HTTP Server mod_http2 module when system file handles are exhausted. A remote attacker could trigger this flaw via HTTP/2 requests to cause a denial of service (crash) or memory corruption.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48913"
},
{
"category": "external",
"summary": "RHBZ#2486405",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486405"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48913",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48913"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48913",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48913"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2026-06-08T15:24:52.573000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T13:28:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56869"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable the `mod_http2` module if HTTP/2 protocol support is not required. This can be achieved by commenting out or removing the `LoadModule http2_module modules/mod_http2.so` line in the Apache HTTP Server configuration file (e.g., `/etc/httpd/conf.modules.d/00-base.conf` or similar). \n\nAfter modifying the configuration, the httpd service must be restarted for the changes to take effect. This action may impact services relying on HTTP/2.",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat JBoss Core Services 2.4.62.SP5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: mod_http2: Apache HTTP Server mod_http2: Use After Free vulnerability allows arbitrary code execution or denial of service."
}
]
}
SUSE-SU-2026:1717-1
Vulnerability from csaf_suse - Published: 2026-05-06 12:13 - Updated: 2026-05-06 12:13Summary
Security update for curl
Severity
Important
Notes
Title of the patch: Security update for curl
Description of the patch: This update for curl fixes the following issues:
Security issues fixed:
- CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631).
- CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632).
- CVE-2026-6253: proxy credentials leak over redirect-to proxy (bsc#1262635).
- CVE-2026-6276: stale custom cookie host causes cookie leak (bsc#1262636).
- CVE-2026-6429: netrc credential leak with reused proxy connection (bsc#1262638).
Other updates and bugfixes:
- sws: prevent 'connection monitor' to say disconnect twice (bsc#1259362).
Patchnames: SUSE-2026-1717,SUSE-SLE-INSTALLER-15-SP4-2026-1717,SUSE-SLE-INSTALLER-15-SP5-2026-1717,SUSE-SLE-Micro-5.3-2026-1717,SUSE-SLE-Micro-5.4-2026-1717,SUSE-SLE-Micro-5.5-2026-1717,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-1717,SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-1717,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-1717,SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-1717,SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-1717,SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-1717,SUSE-SLE-Product-SLES_SAP-15-SP4-2026-1717
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
6.5 (Medium)
Affected products
Recommended
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5.9 (Medium)
Affected products
Recommended
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
29 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for curl",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for curl fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631).\n- CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632).\n- CVE-2026-6253: proxy credentials leak over redirect-to proxy (bsc#1262635).\n- CVE-2026-6276: stale custom cookie host causes cookie leak (bsc#1262636).\n- CVE-2026-6429: netrc credential leak with reused proxy connection (bsc#1262638).\n\nOther updates and bugfixes:\n\n- sws: prevent \u0027connection monitor\u0027 to say disconnect twice (bsc#1259362).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-1717,SUSE-SLE-INSTALLER-15-SP4-2026-1717,SUSE-SLE-INSTALLER-15-SP5-2026-1717,SUSE-SLE-Micro-5.3-2026-1717,SUSE-SLE-Micro-5.4-2026-1717,SUSE-SLE-Micro-5.5-2026-1717,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-1717,SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-1717,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-1717,SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-1717,SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-1717,SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-1717,SUSE-SLE-Product-SLES_SAP-15-SP4-2026-1717",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1717-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:1717-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261717-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:1717-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/025886.html"
},
{
"category": "self",
"summary": "SUSE Bug 1259362",
"url": "https://bugzilla.suse.com/1259362"
},
{
"category": "self",
"summary": "SUSE Bug 1262631",
"url": "https://bugzilla.suse.com/1262631"
},
{
"category": "self",
"summary": "SUSE Bug 1262632",
"url": "https://bugzilla.suse.com/1262632"
},
{
"category": "self",
"summary": "SUSE Bug 1262635",
"url": "https://bugzilla.suse.com/1262635"
},
{
"category": "self",
"summary": "SUSE Bug 1262636",
"url": "https://bugzilla.suse.com/1262636"
},
{
"category": "self",
"summary": "SUSE Bug 1262638",
"url": "https://bugzilla.suse.com/1262638"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-1965 page",
"url": "https://www.suse.com/security/cve/CVE-2026-1965/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4873 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4873/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5545 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5545/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6253 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6253/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6276 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6276/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6429 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6429/"
}
],
"title": "Security update for curl",
"tracking": {
"current_release_date": "2026-05-06T12:13:54Z",
"generator": {
"date": "2026-05-06T12:13:54Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:1717-1",
"initial_release_date": "2026-05-06T12:13:54Z",
"revision_history": [
{
"date": "2026-05-06T12:13:54Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "curl-8.14.1-150400.5.83.1.aarch64",
"product": {
"name": "curl-8.14.1-150400.5.83.1.aarch64",
"product_id": "curl-8.14.1-150400.5.83.1.aarch64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"product": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"product_id": "libcurl-devel-8.14.1-150400.5.83.1.aarch64"
}
},
{
"category": "product_version",
"name": "libcurl-mini4-8.14.1-150400.5.83.1.aarch64",
"product": {
"name": "libcurl-mini4-8.14.1-150400.5.83.1.aarch64",
"product_id": "libcurl-mini4-8.14.1-150400.5.83.1.aarch64"
}
},
{
"category": "product_version",
"name": "libcurl4-8.14.1-150400.5.83.1.aarch64",
"product": {
"name": "libcurl4-8.14.1-150400.5.83.1.aarch64",
"product_id": "libcurl4-8.14.1-150400.5.83.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libcurl-devel-64bit-8.14.1-150400.5.83.1.aarch64_ilp32",
"product": {
"name": "libcurl-devel-64bit-8.14.1-150400.5.83.1.aarch64_ilp32",
"product_id": "libcurl-devel-64bit-8.14.1-150400.5.83.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libcurl4-64bit-8.14.1-150400.5.83.1.aarch64_ilp32",
"product": {
"name": "libcurl4-64bit-8.14.1-150400.5.83.1.aarch64_ilp32",
"product_id": "libcurl4-64bit-8.14.1-150400.5.83.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-8.14.1-150400.5.83.1.i586",
"product": {
"name": "curl-8.14.1-150400.5.83.1.i586",
"product_id": "curl-8.14.1-150400.5.83.1.i586"
}
},
{
"category": "product_version",
"name": "libcurl-devel-8.14.1-150400.5.83.1.i586",
"product": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.i586",
"product_id": "libcurl-devel-8.14.1-150400.5.83.1.i586"
}
},
{
"category": "product_version",
"name": "libcurl-mini4-8.14.1-150400.5.83.1.i586",
"product": {
"name": "libcurl-mini4-8.14.1-150400.5.83.1.i586",
"product_id": "libcurl-mini4-8.14.1-150400.5.83.1.i586"
}
},
{
"category": "product_version",
"name": "libcurl4-8.14.1-150400.5.83.1.i586",
"product": {
"name": "libcurl4-8.14.1-150400.5.83.1.i586",
"product_id": "libcurl4-8.14.1-150400.5.83.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-fish-completion-8.14.1-150400.5.83.1.noarch",
"product": {
"name": "curl-fish-completion-8.14.1-150400.5.83.1.noarch",
"product_id": "curl-fish-completion-8.14.1-150400.5.83.1.noarch"
}
},
{
"category": "product_version",
"name": "curl-zsh-completion-8.14.1-150400.5.83.1.noarch",
"product": {
"name": "curl-zsh-completion-8.14.1-150400.5.83.1.noarch",
"product_id": "curl-zsh-completion-8.14.1-150400.5.83.1.noarch"
}
},
{
"category": "product_version",
"name": "libcurl-devel-doc-8.14.1-150400.5.83.1.noarch",
"product": {
"name": "libcurl-devel-doc-8.14.1-150400.5.83.1.noarch",
"product_id": "libcurl-devel-doc-8.14.1-150400.5.83.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-8.14.1-150400.5.83.1.ppc64le",
"product": {
"name": "curl-8.14.1-150400.5.83.1.ppc64le",
"product_id": "curl-8.14.1-150400.5.83.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"product": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"product_id": "libcurl-devel-8.14.1-150400.5.83.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libcurl-mini4-8.14.1-150400.5.83.1.ppc64le",
"product": {
"name": "libcurl-mini4-8.14.1-150400.5.83.1.ppc64le",
"product_id": "libcurl-mini4-8.14.1-150400.5.83.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libcurl4-8.14.1-150400.5.83.1.ppc64le",
"product": {
"name": "libcurl4-8.14.1-150400.5.83.1.ppc64le",
"product_id": "libcurl4-8.14.1-150400.5.83.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-8.14.1-150400.5.83.1.s390x",
"product": {
"name": "curl-8.14.1-150400.5.83.1.s390x",
"product_id": "curl-8.14.1-150400.5.83.1.s390x"
}
},
{
"category": "product_version",
"name": "libcurl-devel-8.14.1-150400.5.83.1.s390x",
"product": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.s390x",
"product_id": "libcurl-devel-8.14.1-150400.5.83.1.s390x"
}
},
{
"category": "product_version",
"name": "libcurl-mini4-8.14.1-150400.5.83.1.s390x",
"product": {
"name": "libcurl-mini4-8.14.1-150400.5.83.1.s390x",
"product_id": "libcurl-mini4-8.14.1-150400.5.83.1.s390x"
}
},
{
"category": "product_version",
"name": "libcurl4-8.14.1-150400.5.83.1.s390x",
"product": {
"name": "libcurl4-8.14.1-150400.5.83.1.s390x",
"product_id": "libcurl4-8.14.1-150400.5.83.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-8.14.1-150400.5.83.1.x86_64",
"product": {
"name": "curl-8.14.1-150400.5.83.1.x86_64",
"product_id": "curl-8.14.1-150400.5.83.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"product": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"product_id": "libcurl-devel-8.14.1-150400.5.83.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-32bit-8.14.1-150400.5.83.1.x86_64",
"product": {
"name": "libcurl-devel-32bit-8.14.1-150400.5.83.1.x86_64",
"product_id": "libcurl-devel-32bit-8.14.1-150400.5.83.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl-mini4-8.14.1-150400.5.83.1.x86_64",
"product": {
"name": "libcurl-mini4-8.14.1-150400.5.83.1.x86_64",
"product_id": "libcurl-mini4-8.14.1-150400.5.83.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl4-8.14.1-150400.5.83.1.x86_64",
"product": {
"name": "libcurl4-8.14.1-150400.5.83.1.x86_64",
"product_id": "libcurl4-8.14.1-150400.5.83.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"product": {
"name": "libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"product_id": "libcurl4-32bit-8.14.1-150400.5.83.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Installer Updates 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Installer Updates 15 SP4",
"product_id": "SUSE Linux Enterprise Installer Updates 15 SP4"
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Installer Updates 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Installer Updates 15 SP5",
"product_id": "SUSE Linux Enterprise Installer Updates 15 SP5"
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.3",
"product": {
"name": "SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.4",
"product": {
"name": "SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.5",
"product": {
"name": "SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise Installer Updates 15 SP4",
"product_id": "SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Installer Updates 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.ppc64le as component of SUSE Linux Enterprise Installer Updates 15 SP4",
"product_id": "SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Installer Updates 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.s390x as component of SUSE Linux Enterprise Installer Updates 15 SP4",
"product_id": "SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Installer Updates 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Installer Updates 15 SP4",
"product_id": "SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Installer Updates 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise Installer Updates 15 SP5",
"product_id": "SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Installer Updates 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.ppc64le as component of SUSE Linux Enterprise Installer Updates 15 SP5",
"product_id": "SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Installer Updates 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.s390x as component of SUSE Linux Enterprise Installer Updates 15 SP5",
"product_id": "SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Installer Updates 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Installer Updates 15 SP5",
"product_id": "SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Installer Updates 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.s390x as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x"
},
"product_reference": "curl-8.14.1-150400.5.83.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.s390x as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.s390x as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x"
},
"product_reference": "curl-8.14.1-150400.5.83.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.s390x as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.ppc64le as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le"
},
"product_reference": "curl-8.14.1-150400.5.83.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.s390x as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x"
},
"product_reference": "curl-8.14.1-150400.5.83.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.ppc64le as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.s390x as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le"
},
"product_reference": "curl-8.14.1-150400.5.83.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x"
},
"product_reference": "curl-8.14.1-150400.5.83.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le"
},
"product_reference": "libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x"
},
"product_reference": "libcurl-devel-8.14.1-150400.5.83.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le"
},
"product_reference": "curl-8.14.1-150400.5.83.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x"
},
"product_reference": "curl-8.14.1-150400.5.83.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le"
},
"product_reference": "libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x"
},
"product_reference": "libcurl-devel-8.14.1-150400.5.83.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le"
},
"product_reference": "curl-8.14.1-150400.5.83.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "curl-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le"
},
"product_reference": "libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-8.14.1-150400.5.83.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64"
},
"product_reference": "libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-1965",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-1965"
}
],
"notes": [
{
"category": "general",
"text": "libcurl can in some circumstances reuse the wrong connection when asked to do\nan Negotiate-authenticated HTTP or HTTPS request.\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criterion must first be met. Due to a\nlogical error in the code, a request that was issued by an application could\nwrongfully reuse an existing connection to the same server that was\nauthenticated using different credentials. One underlying reason being that\nNegotiate sometimes authenticates *connections* and not *requests*, contrary\nto how HTTP is designed to work.\n\nAn application that allows Negotiate authentication to a server (that responds\nwanting Negotiate) with `user1:password1` and then does another operation to\nthe same server also using Negotiate but with `user2:password2` (while the\nprevious connection is still alive) - the second request wrongly reused the\nsame connection and since it then sees that the Negotiate negotiation is\nalready made, it just sends the request over that connection thinking it uses\nthe user2 credentials when it is in fact still using the connection\nauthenticated for user1...\n\nThe set of authentication methods to use is set with `CURLOPT_HTTPAUTH`.\n\nApplications can disable libcurl\u0027s reuse of connections and thus mitigate this\nproblem, by using one of the following libcurl options to alter how\nconnections are or are not reused: `CURLOPT_FRESH_CONNECT`,\n`CURLOPT_MAXCONNECTS` and `CURLMOPT_MAX_HOST_CONNECTIONS` (if using the\ncurl_multi API).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-1965",
"url": "https://www.suse.com/security/cve/CVE-2026-1965"
},
{
"category": "external",
"summary": "SUSE Bug 1259362 for CVE-2026-1965",
"url": "https://bugzilla.suse.com/1259362"
},
{
"category": "external",
"summary": "SUSE Bug 1262632 for CVE-2026-1965",
"url": "https://bugzilla.suse.com/1262632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-06T12:13:54Z",
"details": "important"
}
],
"title": "CVE-2026-1965"
},
{
"cve": "CVE-2026-4873",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4873"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability exists where a connection requiring TLS incorrectly reuses an\nexisting unencrypted connection from the same connection pool. If an initial\ntransfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request\nto that same host bypasses the TLS requirement and instead transmit data\nunencrypted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4873",
"url": "https://www.suse.com/security/cve/CVE-2026-4873"
},
{
"category": "external",
"summary": "SUSE Bug 1262631 for CVE-2026-4873",
"url": "https://bugzilla.suse.com/1262631"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-06T12:13:54Z",
"details": "low"
}
],
"title": "CVE-2026-4873"
},
{
"cve": "CVE-2026-5545",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5545"
}
],
"notes": [
{
"category": "general",
"text": "libcurl might in some circumstances reuse the wrong connection when asked to\ndo an authenticated HTTP(S) request after a Negotiate-authenticated one, when\nboth use the same host.\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a request that was issued by an application could\nwrongfully reuse an existing connection to the same server that was\nauthenticated using different credentials.\n\nAn application that first uses Negotiate authentication to a server with\n`user1:password1` and then does another operation to the same server asking\nfor any authentication method but for `user2:password2` (while the previous\nconnection is still alive) - the second request gets confused and wrongly\nreuses the same connection and sends the new request over that connection\nthinking it uses a mix of user1\u0027s and user2\u0027s credentials when it is in fact\nstill using the connection authenticated for user1...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5545",
"url": "https://www.suse.com/security/cve/CVE-2026-5545"
},
{
"category": "external",
"summary": "SUSE Bug 1262632 for CVE-2026-5545",
"url": "https://bugzilla.suse.com/1262632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-06T12:13:54Z",
"details": "moderate"
}
],
"title": "CVE-2026-5545"
},
{
"cve": "CVE-2026-6253",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6253"
}
],
"notes": [
{
"category": "general",
"text": "curl might erroneously pass on credentials for a first proxy to a second\nproxy.\n\nThis can happen when the following conditions are true:\n\n1. curl is setup to use specific different proxies for different URL schemes\n2. the first proxy needs credentials\n3. the second proxy uses no credentials\n4. while using the first proxy (using say `http://`), curl is asked to follow\n a redirect to a URL using another scheme (say `https://`), accessed using a\n second, different, proxy",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6253",
"url": "https://www.suse.com/security/cve/CVE-2026-6253"
},
{
"category": "external",
"summary": "SUSE Bug 1262635 for CVE-2026-6253",
"url": "https://bugzilla.suse.com/1262635"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-06T12:13:54Z",
"details": "moderate"
}
],
"title": "CVE-2026-6253"
},
{
"cve": "CVE-2026-6276",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6276"
}
],
"notes": [
{
"category": "general",
"text": "Using libcurl, when a custom `Host:` header is first set for an HTTP request\nand a second request is subsequently done using the same *easy handle* but\nwithout the custom `Host:` header set, the second request would use stale\ninformation and pass on cookies meant for the first host in the second\nrequest. Leak them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6276",
"url": "https://www.suse.com/security/cve/CVE-2026-6276"
},
{
"category": "external",
"summary": "SUSE Bug 1262636 for CVE-2026-6276",
"url": "https://bugzilla.suse.com/1262636"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-06T12:13:54Z",
"details": "low"
}
],
"title": "CVE-2026-6276"
},
{
"cve": "CVE-2026-6429",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6429"
}
],
"notes": [
{
"category": "general",
"text": "When asked to both use a `.netrc` file for credentials and to follow HTTP\nredirects, libcurl could leak the password used for the first host to the\nfollowed-to host under certain circumstances.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6429",
"url": "https://www.suse.com/security/cve/CVE-2026-6429"
},
{
"category": "external",
"summary": "SUSE Bug 1262638 for CVE-2026-6429",
"url": "https://bugzilla.suse.com/1262638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Installer Updates 15 SP5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit-8.14.1-150400.5.83.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-8.14.1-150400.5.83.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-06T12:13:54Z",
"details": "moderate"
}
],
"title": "CVE-2026-6429"
}
]
}
SUSE-SU-2026:1940-1
Vulnerability from csaf_suse - Published: 2026-05-18 07:44 - Updated: 2026-05-18 07:44Summary
Security update for curl
Severity
Important
Notes
Title of the patch: Security update for curl
Description of the patch: This update for curl fixes the following issues:
Security issues fixed:
- CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631).
- CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632).
- CVE-2026-6253: proxy credentials leak over redirect-to proxy (bsc#1262635).
- CVE-2026-6276: stale custom cookie host causes cookie leak (bsc#1262636).
- CVE-2026-6429: netrc credential leak with reused proxy connection (bsc#1262638).
Other updates and bugfixes:
- sws: prevent 'connection monitor' to say disconnect twice (bsc#1259362).
Patchnames: SUSE-2026-1940,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1940,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1940
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
6.5 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5.9 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
29 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for curl",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for curl fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631).\n- CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632).\n- CVE-2026-6253: proxy credentials leak over redirect-to proxy (bsc#1262635).\n- CVE-2026-6276: stale custom cookie host causes cookie leak (bsc#1262636).\n- CVE-2026-6429: netrc credential leak with reused proxy connection (bsc#1262638).\n\nOther updates and bugfixes:\n\n- sws: prevent \u0027connection monitor\u0027 to say disconnect twice (bsc#1259362).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-1940,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1940,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1940",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1940-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:1940-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261940-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:1940-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-May/046543.html"
},
{
"category": "self",
"summary": "SUSE Bug 1259362",
"url": "https://bugzilla.suse.com/1259362"
},
{
"category": "self",
"summary": "SUSE Bug 1262631",
"url": "https://bugzilla.suse.com/1262631"
},
{
"category": "self",
"summary": "SUSE Bug 1262632",
"url": "https://bugzilla.suse.com/1262632"
},
{
"category": "self",
"summary": "SUSE Bug 1262635",
"url": "https://bugzilla.suse.com/1262635"
},
{
"category": "self",
"summary": "SUSE Bug 1262636",
"url": "https://bugzilla.suse.com/1262636"
},
{
"category": "self",
"summary": "SUSE Bug 1262638",
"url": "https://bugzilla.suse.com/1262638"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-1965 page",
"url": "https://www.suse.com/security/cve/CVE-2026-1965/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4873 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4873/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5545 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5545/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6253 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6253/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6276 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6276/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6429 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6429/"
}
],
"title": "Security update for curl",
"tracking": {
"current_release_date": "2026-05-18T07:44:20Z",
"generator": {
"date": "2026-05-18T07:44:20Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:1940-1",
"initial_release_date": "2026-05-18T07:44:20Z",
"revision_history": [
{
"date": "2026-05-18T07:44:20Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "curl-8.14.1-150600.4.43.1.aarch64",
"product": {
"name": "curl-8.14.1-150600.4.43.1.aarch64",
"product_id": "curl-8.14.1-150600.4.43.1.aarch64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"product": {
"name": "libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"product_id": "libcurl-devel-8.14.1-150600.4.43.1.aarch64"
}
},
{
"category": "product_version",
"name": "libcurl-mini4-8.14.1-150600.4.43.1.aarch64",
"product": {
"name": "libcurl-mini4-8.14.1-150600.4.43.1.aarch64",
"product_id": "libcurl-mini4-8.14.1-150600.4.43.1.aarch64"
}
},
{
"category": "product_version",
"name": "libcurl4-8.14.1-150600.4.43.1.aarch64",
"product": {
"name": "libcurl4-8.14.1-150600.4.43.1.aarch64",
"product_id": "libcurl4-8.14.1-150600.4.43.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libcurl-devel-64bit-8.14.1-150600.4.43.1.aarch64_ilp32",
"product": {
"name": "libcurl-devel-64bit-8.14.1-150600.4.43.1.aarch64_ilp32",
"product_id": "libcurl-devel-64bit-8.14.1-150600.4.43.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libcurl4-64bit-8.14.1-150600.4.43.1.aarch64_ilp32",
"product": {
"name": "libcurl4-64bit-8.14.1-150600.4.43.1.aarch64_ilp32",
"product_id": "libcurl4-64bit-8.14.1-150600.4.43.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-8.14.1-150600.4.43.1.i586",
"product": {
"name": "curl-8.14.1-150600.4.43.1.i586",
"product_id": "curl-8.14.1-150600.4.43.1.i586"
}
},
{
"category": "product_version",
"name": "libcurl-devel-8.14.1-150600.4.43.1.i586",
"product": {
"name": "libcurl-devel-8.14.1-150600.4.43.1.i586",
"product_id": "libcurl-devel-8.14.1-150600.4.43.1.i586"
}
},
{
"category": "product_version",
"name": "libcurl-mini4-8.14.1-150600.4.43.1.i586",
"product": {
"name": "libcurl-mini4-8.14.1-150600.4.43.1.i586",
"product_id": "libcurl-mini4-8.14.1-150600.4.43.1.i586"
}
},
{
"category": "product_version",
"name": "libcurl4-8.14.1-150600.4.43.1.i586",
"product": {
"name": "libcurl4-8.14.1-150600.4.43.1.i586",
"product_id": "libcurl4-8.14.1-150600.4.43.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-fish-completion-8.14.1-150600.4.43.1.noarch",
"product": {
"name": "curl-fish-completion-8.14.1-150600.4.43.1.noarch",
"product_id": "curl-fish-completion-8.14.1-150600.4.43.1.noarch"
}
},
{
"category": "product_version",
"name": "curl-zsh-completion-8.14.1-150600.4.43.1.noarch",
"product": {
"name": "curl-zsh-completion-8.14.1-150600.4.43.1.noarch",
"product_id": "curl-zsh-completion-8.14.1-150600.4.43.1.noarch"
}
},
{
"category": "product_version",
"name": "libcurl-devel-doc-8.14.1-150600.4.43.1.noarch",
"product": {
"name": "libcurl-devel-doc-8.14.1-150600.4.43.1.noarch",
"product_id": "libcurl-devel-doc-8.14.1-150600.4.43.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-8.14.1-150600.4.43.1.ppc64le",
"product": {
"name": "curl-8.14.1-150600.4.43.1.ppc64le",
"product_id": "curl-8.14.1-150600.4.43.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"product": {
"name": "libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"product_id": "libcurl-devel-8.14.1-150600.4.43.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libcurl-mini4-8.14.1-150600.4.43.1.ppc64le",
"product": {
"name": "libcurl-mini4-8.14.1-150600.4.43.1.ppc64le",
"product_id": "libcurl-mini4-8.14.1-150600.4.43.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libcurl4-8.14.1-150600.4.43.1.ppc64le",
"product": {
"name": "libcurl4-8.14.1-150600.4.43.1.ppc64le",
"product_id": "libcurl4-8.14.1-150600.4.43.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-8.14.1-150600.4.43.1.s390x",
"product": {
"name": "curl-8.14.1-150600.4.43.1.s390x",
"product_id": "curl-8.14.1-150600.4.43.1.s390x"
}
},
{
"category": "product_version",
"name": "libcurl-devel-8.14.1-150600.4.43.1.s390x",
"product": {
"name": "libcurl-devel-8.14.1-150600.4.43.1.s390x",
"product_id": "libcurl-devel-8.14.1-150600.4.43.1.s390x"
}
},
{
"category": "product_version",
"name": "libcurl-mini4-8.14.1-150600.4.43.1.s390x",
"product": {
"name": "libcurl-mini4-8.14.1-150600.4.43.1.s390x",
"product_id": "libcurl-mini4-8.14.1-150600.4.43.1.s390x"
}
},
{
"category": "product_version",
"name": "libcurl4-8.14.1-150600.4.43.1.s390x",
"product": {
"name": "libcurl4-8.14.1-150600.4.43.1.s390x",
"product_id": "libcurl4-8.14.1-150600.4.43.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-8.14.1-150600.4.43.1.x86_64",
"product": {
"name": "curl-8.14.1-150600.4.43.1.x86_64",
"product_id": "curl-8.14.1-150600.4.43.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"product": {
"name": "libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"product_id": "libcurl-devel-8.14.1-150600.4.43.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-32bit-8.14.1-150600.4.43.1.x86_64",
"product": {
"name": "libcurl-devel-32bit-8.14.1-150600.4.43.1.x86_64",
"product_id": "libcurl-devel-32bit-8.14.1-150600.4.43.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl-mini4-8.14.1-150600.4.43.1.x86_64",
"product": {
"name": "libcurl-mini4-8.14.1-150600.4.43.1.x86_64",
"product_id": "libcurl-mini4-8.14.1-150600.4.43.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl4-8.14.1-150600.4.43.1.x86_64",
"product": {
"name": "libcurl4-8.14.1-150600.4.43.1.x86_64",
"product_id": "libcurl4-8.14.1-150600.4.43.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"product": {
"name": "libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"product_id": "libcurl4-32bit-8.14.1-150600.4.43.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150600.4.43.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64"
},
"product_reference": "curl-8.14.1-150600.4.43.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150600.4.43.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le"
},
"product_reference": "curl-8.14.1-150600.4.43.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150600.4.43.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x"
},
"product_reference": "curl-8.14.1-150600.4.43.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150600.4.43.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64"
},
"product_reference": "curl-8.14.1-150600.4.43.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150600.4.43.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64"
},
"product_reference": "libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150600.4.43.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le"
},
"product_reference": "libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150600.4.43.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x"
},
"product_reference": "libcurl-devel-8.14.1-150600.4.43.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150600.4.43.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64"
},
"product_reference": "libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150600.4.43.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64"
},
"product_reference": "libcurl4-8.14.1-150600.4.43.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150600.4.43.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le"
},
"product_reference": "libcurl4-8.14.1-150600.4.43.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150600.4.43.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x"
},
"product_reference": "libcurl4-8.14.1-150600.4.43.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150600.4.43.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64"
},
"product_reference": "libcurl4-8.14.1-150600.4.43.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-8.14.1-150600.4.43.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64"
},
"product_reference": "libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150600.4.43.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le"
},
"product_reference": "curl-8.14.1-150600.4.43.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-8.14.1-150600.4.43.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64"
},
"product_reference": "curl-8.14.1-150600.4.43.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150600.4.43.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le"
},
"product_reference": "libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-8.14.1-150600.4.43.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64"
},
"product_reference": "libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150600.4.43.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le"
},
"product_reference": "libcurl4-8.14.1-150600.4.43.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-8.14.1-150600.4.43.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
},
"product_reference": "libcurl4-8.14.1-150600.4.43.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-8.14.1-150600.4.43.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64"
},
"product_reference": "libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-1965",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-1965"
}
],
"notes": [
{
"category": "general",
"text": "libcurl can in some circumstances reuse the wrong connection when asked to do\nan Negotiate-authenticated HTTP or HTTPS request.\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criterion must first be met. Due to a\nlogical error in the code, a request that was issued by an application could\nwrongfully reuse an existing connection to the same server that was\nauthenticated using different credentials. One underlying reason being that\nNegotiate sometimes authenticates *connections* and not *requests*, contrary\nto how HTTP is designed to work.\n\nAn application that allows Negotiate authentication to a server (that responds\nwanting Negotiate) with `user1:password1` and then does another operation to\nthe same server also using Negotiate but with `user2:password2` (while the\nprevious connection is still alive) - the second request wrongly reused the\nsame connection and since it then sees that the Negotiate negotiation is\nalready made, it just sends the request over that connection thinking it uses\nthe user2 credentials when it is in fact still using the connection\nauthenticated for user1...\n\nThe set of authentication methods to use is set with `CURLOPT_HTTPAUTH`.\n\nApplications can disable libcurl\u0027s reuse of connections and thus mitigate this\nproblem, by using one of the following libcurl options to alter how\nconnections are or are not reused: `CURLOPT_FRESH_CONNECT`,\n`CURLOPT_MAXCONNECTS` and `CURLMOPT_MAX_HOST_CONNECTIONS` (if using the\ncurl_multi API).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-1965",
"url": "https://www.suse.com/security/cve/CVE-2026-1965"
},
{
"category": "external",
"summary": "SUSE Bug 1259362 for CVE-2026-1965",
"url": "https://bugzilla.suse.com/1259362"
},
{
"category": "external",
"summary": "SUSE Bug 1262632 for CVE-2026-1965",
"url": "https://bugzilla.suse.com/1262632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-18T07:44:20Z",
"details": "important"
}
],
"title": "CVE-2026-1965"
},
{
"cve": "CVE-2026-4873",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4873"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability exists where a connection requiring TLS incorrectly reuses an\nexisting unencrypted connection from the same connection pool. If an initial\ntransfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request\nto that same host bypasses the TLS requirement and instead transmit data\nunencrypted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4873",
"url": "https://www.suse.com/security/cve/CVE-2026-4873"
},
{
"category": "external",
"summary": "SUSE Bug 1262631 for CVE-2026-4873",
"url": "https://bugzilla.suse.com/1262631"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-18T07:44:20Z",
"details": "low"
}
],
"title": "CVE-2026-4873"
},
{
"cve": "CVE-2026-5545",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5545"
}
],
"notes": [
{
"category": "general",
"text": "libcurl might in some circumstances reuse the wrong connection when asked to\ndo an authenticated HTTP(S) request after a Negotiate-authenticated one, when\nboth use the same host.\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a request that was issued by an application could\nwrongfully reuse an existing connection to the same server that was\nauthenticated using different credentials.\n\nAn application that first uses Negotiate authentication to a server with\n`user1:password1` and then does another operation to the same server asking\nfor any authentication method but for `user2:password2` (while the previous\nconnection is still alive) - the second request gets confused and wrongly\nreuses the same connection and sends the new request over that connection\nthinking it uses a mix of user1\u0027s and user2\u0027s credentials when it is in fact\nstill using the connection authenticated for user1...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5545",
"url": "https://www.suse.com/security/cve/CVE-2026-5545"
},
{
"category": "external",
"summary": "SUSE Bug 1262632 for CVE-2026-5545",
"url": "https://bugzilla.suse.com/1262632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-18T07:44:20Z",
"details": "moderate"
}
],
"title": "CVE-2026-5545"
},
{
"cve": "CVE-2026-6253",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6253"
}
],
"notes": [
{
"category": "general",
"text": "curl might erroneously pass on credentials for a first proxy to a second\nproxy.\n\nThis can happen when the following conditions are true:\n\n1. curl is setup to use specific different proxies for different URL schemes\n2. the first proxy needs credentials\n3. the second proxy uses no credentials\n4. while using the first proxy (using say `http://`), curl is asked to follow\n a redirect to a URL using another scheme (say `https://`), accessed using a\n second, different, proxy",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6253",
"url": "https://www.suse.com/security/cve/CVE-2026-6253"
},
{
"category": "external",
"summary": "SUSE Bug 1262635 for CVE-2026-6253",
"url": "https://bugzilla.suse.com/1262635"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-18T07:44:20Z",
"details": "moderate"
}
],
"title": "CVE-2026-6253"
},
{
"cve": "CVE-2026-6276",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6276"
}
],
"notes": [
{
"category": "general",
"text": "Using libcurl, when a custom `Host:` header is first set for an HTTP request\nand a second request is subsequently done using the same *easy handle* but\nwithout the custom `Host:` header set, the second request would use stale\ninformation and pass on cookies meant for the first host in the second\nrequest. Leak them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6276",
"url": "https://www.suse.com/security/cve/CVE-2026-6276"
},
{
"category": "external",
"summary": "SUSE Bug 1262636 for CVE-2026-6276",
"url": "https://bugzilla.suse.com/1262636"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-18T07:44:20Z",
"details": "low"
}
],
"title": "CVE-2026-6276"
},
{
"cve": "CVE-2026-6429",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6429"
}
],
"notes": [
{
"category": "general",
"text": "When asked to both use a `.netrc` file for credentials and to follow HTTP\nredirects, libcurl could leak the password used for the first host to the\nfollowed-to host under certain circumstances.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6429",
"url": "https://www.suse.com/security/cve/CVE-2026-6429"
},
{
"category": "external",
"summary": "SUSE Bug 1262638 for CVE-2026-6429",
"url": "https://bugzilla.suse.com/1262638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libcurl4-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:curl-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl-devel-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-32bit-8.14.1-150600.4.43.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libcurl4-8.14.1-150600.4.43.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-18T07:44:20Z",
"details": "moderate"
}
],
"title": "CVE-2026-6429"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…