Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

SUSE 2026 0885-1 Important Fix for Curl Connection Issues

suse
Calendar Grey March 12, 2026
Dist Suse Esm H88
SUSE curl update addresses multiple critical issues affecting system security. Recommendations for installation included.
An update that solves four vulnerabilities can now be installed.

Summary

## This update for curl fixes the following issues: * CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). * CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). * CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259364). * CVE-2026-3805: use after free in SMB connection reuse (bsc#1259365). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-885=1 openSUSE-SLE-15.6-2026-885=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-885=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6

Topics%20covered

Topics Covered

security advisory update SuSE important curl connection issues

References

* bsc#1259362

* bsc#1259363

* bsc#1259364

* bsc#1259365

Cross-

* CVE-2026-1965

* CVE-2026-3783

* CVE-2026-3784

* CVE-2026-3805

CVSS scores:

* CVE-2026-1965 ( SUSE ): 6.9

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

* CVE-2026-1965 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

* CVE-2026-1965 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

* CVE-2026-3783 ( SUSE ): 5.6

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

* CVE-2026-3783 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

* CVE-2026-3783 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

* CVE-2026-3784 ( SUSE ): 1.0

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:0885-1
Release Date: 2026-03-12T14:50:21Z
Rating: important

Topics%20covered

Topics Covered

security advisory update SuSE important curl connection issues

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here