SUSE-SU-2024:3926-1

MEDIUM5.3

Security update for curl

Published Nov 6, 2024

Modified 1 years ago

Fix available

Details

Description of the patch:

This update for curl fixes the following issues:

CVE-2024-9681: Fixed HSTS subdomain overwrites parent cache entry (bsc#1232528)

Affected Packages

libcurl4

SUSE Linux Enterprise Desktop 15 SP4SUSE Linux Enterprise Desktop 15 SP5SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

Fixed in:

8.0.1-150400.5.56.1

curl

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Micro 5.5

Fixed in:

8.0.1-150400.5.56.1

libcurl-devel

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Module for Basesystem 15 SP5SUSE Linux Enterprise Server 15 SP4-LTSSopenSUSE Leap 15.5

Fixed in:

8.0.1-150400.5.56.1

libcurl4-32bit

Fixed in:

8.0.1-150400.5.56.1

libcurl-devel-32bit

openSUSE Leap 15.5

Fixed in:

8.0.1-150400.5.56.1

References

ADVISORY

https://bugzilla.suse.com/1232528