Threats affecting pkg:deb/suse/curl

A security update for curl addresses multiple vulnerabilities including issues with mTLS configuration, referer header handling, QUIC protocol, memory exhaustion, cross-origin information leaks, host verification bypasses, use-after-free bugs, and credential leaks. The update upgrades curl to version 8.22.0 to fix these issues.

This security update for curl addresses multiple vulnerabilities including broken TLS options for threaded LDAPS, bearer token leakage on cross-protocol redirects, libssh global knownhost override, libssh key passphrase bypass without agent set, and an OpenSSL partial chain store policy bypass. These issues collectively pose a medium severity risk and have been fixed in this update.