SUSE-SU-2026:2925-1: curl&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2026:2925-1 is a vulnerability in curl&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 11 · Downstream 0 · Related 11Timeline
- 13-07-2026PublishedVulnerability first disclosed.
- 15-07-2026Last modifiedVulnerability information updated.
Description
Security update for curl This update for curl fixes the following issues - CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631). - CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402). - CVE-2026-8458: wrong reuse for different services (bsc#1268407). - CVE-2026-8924: traling dot domain super cookie (bsc#1268409). - CVE-2026-8927: env-set cross-proxy Digest auth state leak (bsc#1268413). - CVE-2026-9079: stale proxy password leak (bsc#1268415). - CVE-2026-9080: UAF after pause in socket callback (bsc#1268416). - CVE-2026-9545: exposing HTTP/3 early data (bsc#1268417). - CVE-2026-9547: SSH improper host validation (bsc#1268420). - CVE-2026-10536: HTTP/2 stream-dependency tree UAF (bsc#1268422). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse1 product
- curl&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7< 8.14.1-150700.7.20.1
1 vendor · 1 product