SUSE SLES15 Security Update : curl (SUSE-SU-2026:2926-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2926-1 advisory. This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. - CVE-2026-8458: wrong...

CVE-2026-12064

creationtimestamp| type| source ---|---|--- 2026-07-03 21:37:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpriy25ogr2n 2026-07-07 19:53:20+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mq3ez46pai2v 2026-07-08 00:02:34+00:00| seen|...

DEBIAN-CVE-2026-12064

When a user invokes curl using a schemeless URL combined with --proto-default sftp or scp, a disconnect occurs between the tool layer and libcurl. The tool layer incorrectly infers the URL scheme, which erroneously bypasses the initialization of critical SSH security options like...