SUSE-SU-2026:0879-1

Advisory lineage Upstream: 4 Downstream: 0
Published: 12 Mar 2026, 10:04
Last modified:13 Mar 2026, 08:50

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

12 Mar 2026, 10:04
Published
Vulnerability first disclosed
13 Mar 2026, 08:50
Last Modified
Vulnerability information updated

Description

Security update for curl This update for curl fixes the following issues: - CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). - CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). - CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259364). - CVE-2026-3805: use after free in SMB connection reuse (bsc#1259365).

Affected Systems

  • suse•curl&distro=SUSE Linux Enterprise Micro 5.2

    < 8.14.1-150200.4.103.1

References (9)