Описание
Security update for curl
This update for curl fixes the following issues:
- CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass (bsc#1277476).
- CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free (bsc#1277479).
- CVE-2026-80230: OpenSSL pinning bypass can allow unauthenticated connections to succeed (bsc#1277480).
Список пакетов
Container bci/bci-sle15-kernel-module-devel:latest
Container bci/golang:1.25
Container bci/golang:1.25-openssl
Container bci/golang:1.26
Container bci/golang:latest
Container bci/node:22
Container bci/openjdk:17
Container bci/openjdk:21
Container bci/openjdk:latest
Container bci/python:3
Container bci/python:latest
Container bci/ruby:2
Container bci/ruby:latest
Container bci/rust:1.97
Container bci/rust:latest
Container bci/spack:latest
Container private-registry/1.2/harbor-trivy-adapter:latest
Container private-registry/harbor-trivy-adapter:latest
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest
Container suse/kea:2.6
Container suse/kiosk/firefox-esr:latest
Container suse/postgres:16
Container suse/postgres:16.15
Container suse/postgres:17
Container suse/postgres:17.11
Container suse/postgres:latest
Container suse/rmt-server:latest
Container suse/sle15:latest
Image SLES15-SP7-SAPCAL-Azure
SUSE Linux Enterprise Module for Basesystem 15 SP7
Ссылки
- Link for SUSE-SU-2026:4048-1
- E-Mail link for SUSE-SU-2026:4048-1
- SUSE Security Ratings
- SUSE Bug 1277476
- SUSE Bug 1277479
- SUSE Bug 1277480
- SUSE CVE CVE-2026-13608 page
- SUSE CVE CVE-2026-80229 page
- SUSE CVE CVE-2026-80230 page
Описание
A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle (MITM) attack can inject a premature or shortcut response that bypasses complete peer validation.
Затронутые продукты
Ссылки
- CVE-2026-13608
- SUSE Bug 1277476
Описание
When performing transfers via libcurl's multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership reference; destroying the easy handle prematurely frees this context while the active connection retains a dangling pointer, leading to a heap-use-after-free upon subsequent I/O or post-handshake operations.
Затронутые продукты
Ссылки
- CVE-2026-80229
- SUSE Bug 1277479
Описание
When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that disable standard peer verification (`CURLOPT_SSL_VERIFYPEER = 0` and `CURLOPT_SSL_VERIFYHOST = 0`), libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check under these disabled-verification conditions allows unauthenticated connections to succeed when they should be rejected.
Затронутые продукты
Ссылки
- CVE-2026-80230
- SUSE Bug 1277480