Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 623
Alerts This Week
Warning Icon 1 623

SUSE Linux Micro 2026-20760-1 Important Curl Security Fix

suse
Calendar Grey March 24, 2026
Dist Suse Esm H88
SUSE Linux Micro gets important update for curl addressing four risks, enhancing security measures for users.
An update that solves four vulnerabilities can now be installed.

Summary

## This update for curl fixes the following issues: * CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). * CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). * CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259364). * CVE-2026-3805: use after free in SMB connection reuse (bsc#1259365). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-418=1 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * curl-debuginfo-8.14.1-160000.5.1 * curl-8.14.1-160000.5.1 * libcurl4-8.14.1-160000.5.1 * curl-debugsource-8.14.1-160000.5.1

Topics%20covered

Topics Covered

security advisory update SuSE issue important curl

References

* bsc#1259362

* bsc#1259363

* bsc#1259364

* bsc#1259365

Cross-

* CVE-2026-1965

* CVE-2026-3783

* CVE-2026-3784

* CVE-2026-3805

CVSS scores:

* CVE-2026-1965 ( SUSE ): 6.9

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

* CVE-2026-1965 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

* CVE-2026-1965 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

* CVE-2026-3783 ( SUSE ): 5.6

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

* CVE-2026-3783 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

* CVE-2026-3783 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

* CVE-2026-3784 ( SUSE ): 1.0

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:20760-1
Release Date: 2026-03-20T09:36:18Z
Rating: important

Topics%20covered

Topics Covered

security advisory update SuSE issue important curl

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.