SUSE-SU-2024:1151-1

Details

Description of the patch:

This update for curl fixes the following issues:

CVE-2024-2004: Fix the uUsage of disabled protocol logic. (bsc#1221665)
CVE-2024-2398: Fix HTTP/2 push headers memory-leak. (bsc#1221667)

Affected Packages

libcurl4

SUSE Linux Enterprise Desktop 15 SP4SUSE Linux Enterprise Desktop 15 SP5SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP5SUSE Linux Enterprise Installer Updates 15 SP4

Fixed in:

8.0.1-150400.5.44.1

curl

SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Basesystem 15 SP5openSUSE Leap 15.5

Fixed in:

8.0.1-150400.5.44.1

libcurl-devel

SUSE Linux Enterprise Module for Basesystem 15 SP5openSUSE Leap 15.5

Fixed in:

8.0.1-150400.5.44.1

libcurl4-32bit

SUSE Linux Enterprise Module for Basesystem 15 SP5openSUSE Leap 15.5

Fixed in:

8.0.1-150400.5.44.1

libcurl-devel-32bit

openSUSE Leap 15.5