SUSE-SU-2024:3926-1

UNKNOWN

Security update for curl

Published Nov 6, 2024

Modified 1 years ago

Fix available

Details

This update for curl fixes the following issues:

CVE-2024-9681: Fixed HSTS subdomain overwrites parent cache entry (bsc#1232528)

Affected Packages

curl

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Installer Updates 15 SP4SUSE Linux Enterprise Installer Updates 15 SP5SUSE Linux Enterprise Micro 5.3

Fixed in:

8.0.1-150400.5.56.1

libcurl-devel

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Module for Basesystem 15 SP5SUSE Linux Enterprise Server 15 SP4-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP4

Fixed in:

8.0.1-150400.5.56.1

libcurl4

Fixed in:

8.0.1-150400.5.56.1

libcurl4-32bit

Fixed in:

8.0.1-150400.5.56.1

libcurl-devel-32bit

openSUSE Leap 15.5

Fixed in:

8.0.1-150400.5.56.1