SUSE-SU-2024:4288-1

Опубликовано: 11 дек. 2024

Источник: suse-cvrf

Описание

Security update for curl

This update for curl fixes the following issues:

CVE-2024-11053: Fixed password leak used for the first host to the followed-to host under certain circumstances (bsc#1234068)

Список пакетов

Container bci/bci-sle15-kernel-module-devel:15.6

libcurl4-8.6.0-150600.4.15.1

Container bci/gcc:latest

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container bci/golang:1.23

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container bci/golang:1.23-openssl

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container bci/golang:latest

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container bci/kiwi:latest

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container bci/node:20

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container bci/node:22

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container bci/openjdk:17

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container bci/openjdk:latest

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container bci/php-apache:latest

libcurl4-8.6.0-150600.4.15.1

Container bci/php-fpm:latest

libcurl4-8.6.0-150600.4.15.1

Container bci/php:latest

libcurl4-8.6.0-150600.4.15.1

Container bci/python:3

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container bci/ruby:latest

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container bci/rust:1.86

libcurl4-8.6.0-150600.4.15.1

Container bci/rust:latest

libcurl4-8.6.0-150600.4.15.1

Container bci/spack:0.23

curl-8.6.0-150600.4.15.1

libcurl-devel-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container containers/lmcache-lmstack-router:0

libcurl4-8.6.0-150600.4.15.1

Container containers/lmcache-vllm-openai:0

libcurl4-8.6.0-150600.4.15.1

Container containers/milvus:2.4

libcurl4-8.6.0-150600.4.15.1

Container containers/open-webui-mcpo:0

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container containers/open-webui-pipelines:0

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container containers/open-webui:0

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container containers/python:3.11

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container containers/python:3.9

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container containers/pytorch:2-nvidia

libcurl4-8.6.0-150600.4.15.1

Container containers/pytorch:2.5.0

libcurl4-8.6.0-150600.4.15.1

Container containers/vllm-openai:0

libcurl4-8.6.0-150600.4.15.1

Container private-registry/harbor-db:latest

libcurl4-8.6.0-150600.4.15.1

Container private-registry/harbor-trivy-adapter:latest

libcurl4-8.6.0-150600.4.15.1

Container suse/git:2

libcurl4-8.6.0-150600.4.15.1

Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container suse/kiosk/firefox-esr:esr

libcurl4-8.6.0-150600.4.15.1

Container suse/ltss/sle15.6/sle15:latest

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container suse/manager/5.0/x86_64/proxy-httpd:latest

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container suse/manager/5.0/x86_64/proxy-salt-broker:latest

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container suse/manager/5.0/x86_64/server-hub-xmlrpc-api:latest

libcurl4-8.6.0-150600.4.15.1

Container suse/manager/5.0/x86_64/server-migration-14-16:latest

libcurl4-8.6.0-150600.4.15.1

Container suse/manager/5.0/x86_64/server:latest

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container suse/sle15:15.6

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container suse/sles/15.7/cdi-cloner:1.58.0

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container suse/sles/15.7/cdi-importer:1.58.0

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container suse/sles/15.7/cdi-uploadserver:1.58.0

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container suse/sles/15.7/libguestfs-tools:1.5.0

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container suse/sles/15.7/virt-handler:1.5.0

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Container suse/sles/15.7/virt-launcher:1.5.0

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-Azure-3P

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-Azure-Basic

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-Azure-Standard

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-BYOS

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-BYOS-Azure

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-BYOS-EC2

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-BYOS-GCE

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-CHOST-BYOS

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-CHOST-BYOS-Azure

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-CHOST-BYOS-EC2

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-CHOST-BYOS-GCE

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-CHOST-BYOS-GDC

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-EC2

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-EC2-ECS-HVM

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-GCE

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-HPC

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-HPC-Azure

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-HPC-BYOS

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-HPC-BYOS-Azure

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-HPC-BYOS-EC2

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-HPC-BYOS-GCE

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-HPC-EC2

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-HPC-GCE

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-Hardened-BYOS

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-Hardened-BYOS-Azure

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-Hardened-BYOS-EC2

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-Hardened-BYOS-GCE

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP

curl-8.6.0-150600.4.15.1

libcurl-devel-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

libcurl4-32bit-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-Azure

curl-8.6.0-150600.4.15.1

libcurl-devel-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

libcurl4-32bit-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-Azure-3P

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-BYOS

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-BYOS-Azure

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-BYOS-EC2

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-BYOS-GCE

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-EC2

curl-8.6.0-150600.4.15.1

libcurl-devel-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

libcurl4-32bit-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-GCE

curl-8.6.0-150600.4.15.1

libcurl-devel-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

libcurl4-32bit-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-Hardened

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-Hardened-Azure

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-Hardened-BYOS

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-Hardened-EC2

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-SAP-Hardened-GCE

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

Image SLES15-SP6-SAPCAL

curl-8.6.0-150600.4.15.1

libcurl-devel-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

libcurl4-32bit-8.6.0-150600.4.15.1

Image SLES15-SP6-SAPCAL-Azure

curl-8.6.0-150600.4.15.1

libcurl-devel-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

libcurl4-32bit-8.6.0-150600.4.15.1

Image SLES15-SP6-SAPCAL-EC2

curl-8.6.0-150600.4.15.1

libcurl-devel-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

libcurl4-32bit-8.6.0-150600.4.15.1

Image SLES15-SP6-SAPCAL-GCE

curl-8.6.0-150600.4.15.1

libcurl-devel-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

libcurl4-32bit-8.6.0-150600.4.15.1

Image ai_15_6

libcurl4-8.6.0-150600.4.15.1

Image python_15_6

curl-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

SUSE Linux Enterprise Module for Basesystem 15 SP6

curl-8.6.0-150600.4.15.1

libcurl-devel-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

libcurl4-32bit-8.6.0-150600.4.15.1

openSUSE Leap 15.6

curl-8.6.0-150600.4.15.1

libcurl-devel-8.6.0-150600.4.15.1

libcurl-devel-32bit-8.6.0-150600.4.15.1

libcurl4-8.6.0-150600.4.15.1

libcurl4-32bit-8.6.0-150600.4.15.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20244288-1/
Link for SUSE-SU-2024:4288-1
https://lists.suse.com/pipermail/sle-security-updates/2024-December/019983.html
E-Mail link for SUSE-SU-2024:4288-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1234068
SUSE Bug 1234068
https://www.suse.com/security/cve/CVE-2024-11053/
SUSE CVE CVE-2024-11053 page

Описание

When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Затронутые продукты

Container bci/bci-sle15-kernel-module-devel:15.6:libcurl4-8.6.0-150600.4.15.1

Container bci/gcc:latest:curl-8.6.0-150600.4.15.1

Container bci/gcc:latest:libcurl4-8.6.0-150600.4.15.1

Container bci/golang:1.23-openssl:curl-8.6.0-150600.4.15.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-11053.html
CVE-2024-11053
https://bugzilla.suse.com/1234068
SUSE Bug 1234068
https://bugzilla.suse.com/1262638
SUSE Bug 1262638