Security update for curl SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:3004-1 Final 1 1 2022-09-02T13:02:21Z current 2022-09-02T13:02:21Z 2022-09-02T13:02:21Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for curl This update for curl fixes the following issues: - CVE-2022-35252: Fixed a potential injection of control characters into cookies, which could be exploited by sister sites to cause a denial of service (bsc#1202593). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/bci-init:15.3-2022-3004,Container bci/node:12-2022-3004,Container bci/python:3-2022-3004,Container ses/7.1/ceph/grafana:latest-2022-3004,Container ses/7.1/ceph/haproxy:latest-2022-3004,Container ses/7.1/ceph/keepalived:latest-2022-3004,Container ses/7.1/ceph/prometheus-alertmanager:latest-2022-3004,Container ses/7.1/ceph/prometheus-node-exporter:latest-2022-3004,Container ses/7.1/ceph/prometheus-server:latest-2022-3004,Container ses/7.1/ceph/prometheus-snmp_notifier:latest-2022-3004,Container ses/7.1/cephcsi/cephcsi:latest-2022-3004,Container ses/7.1/cephcsi/csi-attacher:v4.1.0-2022-3004,Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0-2022-3004,Container ses/7.1/cephcsi/csi-provisioner:v3.4.0-2022-3004,Container ses/7.1/cephcsi/csi-resizer:v1.7.0-2022-3004,Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1-2022-3004,Container ses/7.1/rook/ceph:latest-2022-3004,Container suse/ltss/sle15.3/bci-base-fips:15.3-2022-3004,Container suse/sle-micro-rancher/5.2:latest-2022-3004,Container suse/sle-micro/5.1/toolbox:latest-2022-3004,Container suse/sle-micro/5.2/toolbox:latest-2022-3004,Container suse/sle15:15.2-2022-3004,Container suse/sle15:15.3-2022-3004,Container trento/trento-db:latest-2022-3004,Container trento/trento-runner:latest-2022-3004,Container trento/trento-wanda:latest-2022-3004,Container trento/trento-web:latest-2022-3004,Image SLES15-SP2-BYOS-Azure-2022-3004,Image SLES15-SP2-BYOS-EC2-HVM-2022-3004,Image SLES15-SP2-BYOS-GCE-2022-3004,Image SLES15-SP2-HPC-BYOS-Azure-2022-3004,Image SLES15-SP2-HPC-BYOS-EC2-HVM-2022-3004,Image SLES15-SP2-SAP-Azure-2022-3004,Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2022-3004,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2022-3004,Image SLES15-SP2-SAP-BYOS-Azure-2022-3004,Image SLES15-SP2-SAP-BYOS-EC2-HVM-2022-3004,Image SLES15-SP2-SAP-BYOS-GCE-2022-3004,Image SLES15-SP2-SAP-EC2-HVM-2022-3004,Image SLES15-SP2-SAP-GCE-2022-3004,Image SLES15-SP3-BYOS-Azure-2022-3004,Image SLES15-SP3-BYOS-EC2-HVM-2022-3004,Image SLES15-SP3-BYOS-GCE-2022-3004,Image SLES15-SP3-CHOST-BYOS-Aliyun-2022-3004,Image SLES15-SP3-CHOST-BYOS-Azure-2022-3004,Image SLES15-SP3-CHOST-BYOS-EC2-2022-3004,Image SLES15-SP3-CHOST-BYOS-GCE-2022-3004,Image SLES15-SP3-CHOST-BYOS-SAP-CCloud-2022-3004,Image SLES15-SP3-HPC-BYOS-Azure-2022-3004,Image SLES15-SP3-HPC-BYOS-EC2-HVM-2022-3004,Image SLES15-SP3-HPC-BYOS-GCE-2022-3004,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure-2022-3004,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM-2022-3004,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE-2022-3004,Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure-2022-3004,Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM-2022-3004,Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE-2022-3004,Image SLES15-SP3-Micro-5-1-BYOS-Azure-2022-3004,Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM-2022-3004,Image SLES15-SP3-Micro-5-1-BYOS-GCE-2022-3004,Image SLES15-SP3-Micro-5-2-BYOS-Azure-2022-3004,Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM-2022-3004,Image SLES15-SP3-Micro-5-2-BYOS-GCE-2022-3004,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2022-3004,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2022-3004,Image SLES15-SP3-SAP-BYOS-Azure-2022-3004,Image SLES15-SP3-SAP-BYOS-EC2-HVM-2022-3004,Image SLES15-SP3-SAP-BYOS-GCE-2022-3004,Image SLES15-SP3-SAPCAL-Azure-2022-3004,Image SLES15-SP3-SAPCAL-EC2-HVM-2022-3004,Image SLES15-SP3-SAPCAL-GCE-2022-3004,SUSE-2022-3004,SUSE-SLE-Module-Basesystem-15-SP3-2022-3004,SUSE-SUSE-MicroOS-5.1-2022-3004,SUSE-SUSE-MicroOS-5.2-2022-3004,openSUSE-Leap-Micro-5.2-2022-3004,openSUSE-SLE-15.3-2022-3004 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20223004-1/ Link for SUSE-SU-2022:3004-1 https://lists.suse.com/pipermail/sle-security-updates/2022-September/012067.html E-Mail link for SUSE-SU-2022:3004-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1202593 SUSE Bug 1202593 https://www.suse.com/security/cve/CVE-2022-35252/ SUSE CVE CVE-2022-35252 page Container bci/bci-init:15.3 Container bci/node:12 Container bci/python:3 Container ses/7.1/ceph/grafana:latest Container ses/7.1/ceph/haproxy:latest Container ses/7.1/ceph/keepalived:latest Container ses/7.1/ceph/prometheus-alertmanager:latest Container ses/7.1/ceph/prometheus-node-exporter:latest Container ses/7.1/ceph/prometheus-server:latest Container ses/7.1/ceph/prometheus-snmp_notifier:latest Container ses/7.1/cephcsi/cephcsi:latest Container ses/7.1/cephcsi/csi-attacher:v4.1.0 Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 Container ses/7.1/cephcsi/csi-provisioner:v3.4.0 Container ses/7.1/cephcsi/csi-resizer:v1.7.0 Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1 Container ses/7.1/rook/ceph:latest Container suse/ltss/sle15.3/bci-base-fips:15.3 Container suse/sle-micro-rancher/5.2:latest Container suse/sle-micro/5.1/toolbox:latest Container suse/sle-micro/5.2/toolbox:latest Container suse/sle15:15.2 Container suse/sle15:15.3 Container trento/trento-db:latest Container trento/trento-runner:latest Container trento/trento-wanda:latest Container trento/trento-web:latest Image SLES15-SP2-BYOS-Azure Image SLES15-SP2-BYOS-EC2-HVM Image SLES15-SP2-BYOS-GCE Image SLES15-SP2-HPC-BYOS-Azure Image SLES15-SP2-HPC-BYOS-EC2-HVM Image SLES15-SP2-SAP-Azure Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-SAP-BYOS-Azure Image SLES15-SP2-SAP-BYOS-EC2-HVM Image SLES15-SP2-SAP-BYOS-GCE Image SLES15-SP2-SAP-EC2-HVM Image SLES15-SP2-SAP-GCE Image SLES15-SP3-BYOS-Azure Image SLES15-SP3-BYOS-EC2-HVM Image SLES15-SP3-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-Aliyun Image SLES15-SP3-CHOST-BYOS-Azure Image SLES15-SP3-CHOST-BYOS-EC2 Image SLES15-SP3-CHOST-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-SAP-CCloud Image SLES15-SP3-HPC-BYOS-Azure Image SLES15-SP3-HPC-BYOS-EC2-HVM Image SLES15-SP3-HPC-BYOS-GCE Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP3-Micro-5-1-BYOS-Azure Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-1-BYOS-GCE Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-SAP-BYOS-Azure Image SLES15-SP3-SAP-BYOS-EC2-HVM Image SLES15-SP3-SAP-BYOS-GCE Image SLES15-SP3-SAPCAL-Azure Image SLES15-SP3-SAPCAL-EC2-HVM Image SLES15-SP3-SAPCAL-GCE SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15 SP3 openSUSE Leap 15.3 openSUSE Leap Micro 5.2 libcurl4-7.66.0-150200.4.39.1 curl-7.66.0-150200.4.39.1 libcurl-devel-7.66.0-150200.4.39.1 libcurl4-32bit-7.66.0-150200.4.39.1 curl-mini-7.66.0-150200.4.39.1 libcurl-devel-32bit-7.66.0-150200.4.39.1 libcurl-devel-64bit-7.66.0-150200.4.39.1 libcurl-mini-devel-7.66.0-150200.4.39.1 libcurl4-64bit-7.66.0-150200.4.39.1 libcurl4-mini-7.66.0-150200.4.39.1 libcurl4-7.66.0-150200.4.39.1 as a component of Container bci/bci-init:15.3 libcurl4-7.66.0-150200.4.39.1 as a component of Container bci/node:12 curl-7.66.0-150200.4.39.1 as a component of Container bci/python:3 libcurl4-7.66.0-150200.4.39.1 as a component of Container bci/python:3 libcurl4-7.66.0-150200.4.39.1 as a component of Container ses/7.1/ceph/grafana:latest libcurl4-7.66.0-150200.4.39.1 as a component of Container ses/7.1/ceph/haproxy:latest libcurl4-7.66.0-150200.4.39.1 as a component of Container ses/7.1/ceph/keepalived:latest libcurl4-7.66.0-150200.4.39.1 as a component of Container ses/7.1/ceph/prometheus-alertmanager:latest libcurl4-7.66.0-150200.4.39.1 as a component of Container ses/7.1/ceph/prometheus-node-exporter:latest libcurl4-7.66.0-150200.4.39.1 as a component of Container ses/7.1/ceph/prometheus-server:latest libcurl4-7.66.0-150200.4.39.1 as a component of Container ses/7.1/ceph/prometheus-snmp_notifier:latest libcurl4-7.66.0-150200.4.39.1 as a component of Container ses/7.1/cephcsi/cephcsi:latest libcurl4-7.66.0-150200.4.39.1 as a component of Container ses/7.1/cephcsi/csi-attacher:v4.1.0 libcurl4-7.66.0-150200.4.39.1 as a component of Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 libcurl4-7.66.0-150200.4.39.1 as a component of Container ses/7.1/cephcsi/csi-provisioner:v3.4.0 libcurl4-7.66.0-150200.4.39.1 as a component of Container ses/7.1/cephcsi/csi-resizer:v1.7.0 libcurl4-7.66.0-150200.4.39.1 as a component of Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1 libcurl4-7.66.0-150200.4.39.1 as a component of Container ses/7.1/rook/ceph:latest libcurl4-7.66.0-150200.4.39.1 as a component of Container suse/ltss/sle15.3/bci-base-fips:15.3 curl-7.66.0-150200.4.39.1 as a component of Container suse/sle-micro-rancher/5.2:latest libcurl4-7.66.0-150200.4.39.1 as a component of Container suse/sle-micro-rancher/5.2:latest libcurl4-7.66.0-150200.4.39.1 as a component of Container suse/sle-micro/5.1/toolbox:latest libcurl4-7.66.0-150200.4.39.1 as a component of Container suse/sle-micro/5.2/toolbox:latest libcurl4-7.66.0-150200.4.39.1 as a component of Container suse/sle15:15.2 curl-7.66.0-150200.4.39.1 as a component of Container suse/sle15:15.3 libcurl4-7.66.0-150200.4.39.1 as a component of Container suse/sle15:15.3 libcurl4-7.66.0-150200.4.39.1 as a component of Container trento/trento-db:latest libcurl4-7.66.0-150200.4.39.1 as a component of Container trento/trento-runner:latest libcurl4-7.66.0-150200.4.39.1 as a component of Container trento/trento-wanda:latest libcurl4-7.66.0-150200.4.39.1 as a component of Container trento/trento-web:latest curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-BYOS-Azure libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-BYOS-Azure curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-BYOS-EC2-HVM libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-BYOS-EC2-HVM curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-BYOS-GCE libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-BYOS-GCE curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-HPC-BYOS-Azure libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-HPC-BYOS-Azure curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-HPC-BYOS-EC2-HVM libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-HPC-BYOS-EC2-HVM curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-SAP-Azure libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-SAP-Azure curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-SAP-BYOS-Azure libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-SAP-BYOS-Azure curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-SAP-BYOS-EC2-HVM libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-SAP-BYOS-EC2-HVM curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-SAP-BYOS-GCE libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-SAP-BYOS-GCE curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-SAP-EC2-HVM libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-SAP-EC2-HVM curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-SAP-GCE libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP2-SAP-GCE curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-BYOS-Azure libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-BYOS-Azure curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-BYOS-EC2-HVM libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-BYOS-EC2-HVM curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-BYOS-GCE libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-BYOS-GCE curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-CHOST-BYOS-Aliyun libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-CHOST-BYOS-Aliyun curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-CHOST-BYOS-Azure libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-CHOST-BYOS-Azure curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-CHOST-BYOS-EC2 libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-CHOST-BYOS-EC2 curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-CHOST-BYOS-GCE libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-CHOST-BYOS-GCE curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-CHOST-BYOS-SAP-CCloud libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-CHOST-BYOS-SAP-CCloud curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-HPC-BYOS-Azure libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-HPC-BYOS-Azure curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-HPC-BYOS-EC2-HVM libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-HPC-BYOS-EC2-HVM curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-HPC-BYOS-GCE libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-HPC-BYOS-GCE curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-Azure libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-Azure curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-GCE libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-GCE curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-Azure libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-Azure curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-GCE libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-GCE curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAPCAL-Azure libcurl-devel-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAPCAL-Azure libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAPCAL-Azure libcurl4-32bit-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAPCAL-Azure curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM libcurl-devel-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM libcurl4-32bit-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM curl-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAPCAL-GCE libcurl-devel-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAPCAL-GCE libcurl4-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAPCAL-GCE libcurl4-32bit-7.66.0-150200.4.39.1 as a component of Image SLES15-SP3-SAPCAL-GCE curl-7.66.0-150200.4.39.1 as a component of SUSE Linux Enterprise Micro 5.1 libcurl4-7.66.0-150200.4.39.1 as a component of SUSE Linux Enterprise Micro 5.1 curl-7.66.0-150200.4.39.1 as a component of SUSE Linux Enterprise Micro 5.2 libcurl4-7.66.0-150200.4.39.1 as a component of SUSE Linux Enterprise Micro 5.2 curl-7.66.0-150200.4.39.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libcurl-devel-7.66.0-150200.4.39.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libcurl4-7.66.0-150200.4.39.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libcurl4-32bit-7.66.0-150200.4.39.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 curl-7.66.0-150200.4.39.1 as a component of openSUSE Leap 15.3 libcurl-devel-7.66.0-150200.4.39.1 as a component of openSUSE Leap 15.3 libcurl-devel-32bit-7.66.0-150200.4.39.1 as a component of openSUSE Leap 15.3 libcurl4-7.66.0-150200.4.39.1 as a component of openSUSE Leap 15.3 libcurl4-32bit-7.66.0-150200.4.39.1 as a component of openSUSE Leap 15.3 curl-7.66.0-150200.4.39.1 as a component of openSUSE Leap Micro 5.2 libcurl4-7.66.0-150200.4.39.1 as a component of openSUSE Leap Micro 5.2 When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings. CVE-2022-35252 Container bci/bci-init:15.3:libcurl4-7.66.0-150200.4.39.1 Container bci/node:12:libcurl4-7.66.0-150200.4.39.1 Container bci/python:3:curl-7.66.0-150200.4.39.1 Container bci/python:3:libcurl4-7.66.0-150200.4.39.1 Container ses/7.1/ceph/grafana:latest:libcurl4-7.66.0-150200.4.39.1 Container ses/7.1/ceph/haproxy:latest:libcurl4-7.66.0-150200.4.39.1 Container ses/7.1/ceph/keepalived:latest:libcurl4-7.66.0-150200.4.39.1 Container ses/7.1/ceph/prometheus-alertmanager:latest:libcurl4-7.66.0-150200.4.39.1 Container ses/7.1/ceph/prometheus-node-exporter:latest:libcurl4-7.66.0-150200.4.39.1 Container ses/7.1/ceph/prometheus-server:latest:libcurl4-7.66.0-150200.4.39.1 Container ses/7.1/ceph/prometheus-snmp_notifier:latest:libcurl4-7.66.0-150200.4.39.1 Container ses/7.1/cephcsi/cephcsi:latest:libcurl4-7.66.0-150200.4.39.1 Container ses/7.1/cephcsi/csi-attacher:v4.1.0:libcurl4-7.66.0-150200.4.39.1 Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0:libcurl4-7.66.0-150200.4.39.1 Container ses/7.1/cephcsi/csi-provisioner:v3.4.0:libcurl4-7.66.0-150200.4.39.1 Container ses/7.1/cephcsi/csi-resizer:v1.7.0:libcurl4-7.66.0-150200.4.39.1 Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1:libcurl4-7.66.0-150200.4.39.1 Container ses/7.1/rook/ceph:latest:libcurl4-7.66.0-150200.4.39.1 Container suse/ltss/sle15.3/bci-base-fips:15.3:libcurl4-7.66.0-150200.4.39.1 Container suse/sle-micro-rancher/5.2:latest:curl-7.66.0-150200.4.39.1 Container suse/sle-micro-rancher/5.2:latest:libcurl4-7.66.0-150200.4.39.1 Container suse/sle-micro/5.1/toolbox:latest:libcurl4-7.66.0-150200.4.39.1 Container suse/sle-micro/5.2/toolbox:latest:libcurl4-7.66.0-150200.4.39.1 Container suse/sle15:15.2:libcurl4-7.66.0-150200.4.39.1 Container suse/sle15:15.3:curl-7.66.0-150200.4.39.1 Container suse/sle15:15.3:libcurl4-7.66.0-150200.4.39.1 Container trento/trento-db:latest:libcurl4-7.66.0-150200.4.39.1 Container trento/trento-runner:latest:libcurl4-7.66.0-150200.4.39.1 Container trento/trento-wanda:latest:libcurl4-7.66.0-150200.4.39.1 Container trento/trento-web:latest:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP2-BYOS-Azure:curl-7.66.0-150200.4.39.1 Image SLES15-SP2-BYOS-Azure:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP2-BYOS-EC2-HVM:curl-7.66.0-150200.4.39.1 Image SLES15-SP2-BYOS-EC2-HVM:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP2-BYOS-GCE:curl-7.66.0-150200.4.39.1 Image SLES15-SP2-BYOS-GCE:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP2-HPC-BYOS-Azure:curl-7.66.0-150200.4.39.1 Image SLES15-SP2-HPC-BYOS-Azure:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP2-HPC-BYOS-EC2-HVM:curl-7.66.0-150200.4.39.1 Image SLES15-SP2-HPC-BYOS-EC2-HVM:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:curl-7.66.0-150200.4.39.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:curl-7.66.0-150200.4.39.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP2-SAP-Azure:curl-7.66.0-150200.4.39.1 Image SLES15-SP2-SAP-Azure:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP2-SAP-BYOS-Azure:curl-7.66.0-150200.4.39.1 Image SLES15-SP2-SAP-BYOS-Azure:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP2-SAP-BYOS-EC2-HVM:curl-7.66.0-150200.4.39.1 Image SLES15-SP2-SAP-BYOS-EC2-HVM:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP2-SAP-BYOS-GCE:curl-7.66.0-150200.4.39.1 Image SLES15-SP2-SAP-BYOS-GCE:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP2-SAP-EC2-HVM:curl-7.66.0-150200.4.39.1 Image SLES15-SP2-SAP-EC2-HVM:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP2-SAP-GCE:curl-7.66.0-150200.4.39.1 Image SLES15-SP2-SAP-GCE:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-BYOS-Azure:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-BYOS-Azure:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-BYOS-EC2-HVM:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-BYOS-EC2-HVM:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-BYOS-GCE:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-BYOS-GCE:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-CHOST-BYOS-Aliyun:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-CHOST-BYOS-Aliyun:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-CHOST-BYOS-Azure:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-CHOST-BYOS-Azure:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-CHOST-BYOS-EC2:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-CHOST-BYOS-EC2:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-CHOST-BYOS-GCE:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-CHOST-BYOS-GCE:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-HPC-BYOS-Azure:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-HPC-BYOS-Azure:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-HPC-BYOS-GCE:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-HPC-BYOS-GCE:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-SAP-BYOS-Azure:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-SAP-BYOS-Azure:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-SAP-BYOS-GCE:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-SAP-BYOS-GCE:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-SAPCAL-Azure:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-SAPCAL-Azure:libcurl-devel-7.66.0-150200.4.39.1 Image SLES15-SP3-SAPCAL-Azure:libcurl4-32bit-7.66.0-150200.4.39.1 Image SLES15-SP3-SAPCAL-Azure:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-SAPCAL-EC2-HVM:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-SAPCAL-EC2-HVM:libcurl-devel-7.66.0-150200.4.39.1 Image SLES15-SP3-SAPCAL-EC2-HVM:libcurl4-32bit-7.66.0-150200.4.39.1 Image SLES15-SP3-SAPCAL-EC2-HVM:libcurl4-7.66.0-150200.4.39.1 Image SLES15-SP3-SAPCAL-GCE:curl-7.66.0-150200.4.39.1 Image SLES15-SP3-SAPCAL-GCE:libcurl-devel-7.66.0-150200.4.39.1 Image SLES15-SP3-SAPCAL-GCE:libcurl4-32bit-7.66.0-150200.4.39.1 Image SLES15-SP3-SAPCAL-GCE:libcurl4-7.66.0-150200.4.39.1 SUSE Linux Enterprise Micro 5.1:curl-7.66.0-150200.4.39.1 SUSE Linux Enterprise Micro 5.1:libcurl4-7.66.0-150200.4.39.1 SUSE Linux Enterprise Micro 5.2:curl-7.66.0-150200.4.39.1 SUSE Linux Enterprise Micro 5.2:libcurl4-7.66.0-150200.4.39.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:curl-7.66.0-150200.4.39.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libcurl-devel-7.66.0-150200.4.39.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libcurl4-32bit-7.66.0-150200.4.39.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libcurl4-7.66.0-150200.4.39.1 openSUSE Leap 15.3:curl-7.66.0-150200.4.39.1 openSUSE Leap 15.3:libcurl-devel-32bit-7.66.0-150200.4.39.1 openSUSE Leap 15.3:libcurl-devel-7.66.0-150200.4.39.1 openSUSE Leap 15.3:libcurl4-32bit-7.66.0-150200.4.39.1 openSUSE Leap 15.3:libcurl4-7.66.0-150200.4.39.1 openSUSE Leap Micro 5.2:curl-7.66.0-150200.4.39.1 openSUSE Leap Micro 5.2:libcurl4-7.66.0-150200.4.39.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223004-1/ https://www.suse.com/security/cve/CVE-2022-35252.html CVE-2022-35252 https://bugzilla.suse.com/1202593 SUSE Bug 1202593