All errata/sisyphus_e2k/ALT-PU-2026-14688-1
ALT-PU-2026-14688-1

Package update curl in branch sisyphus_e2k

Version8.21.0-alt2
Task#0
Published2026-09-02
Max severityMEDIUM
Severity:

Closed issues (1)

CVE-2024-32928
MEDIUM5.9

The libcurl CURLOPT_SSL_VERIFYPEER option was disabled on a subset of requests made by Nest production devices which enabled a potential man-in-the-middle attack on requests to Google cloud services by any host the traffic was routed through.

Published: 2024-08-19Modified: 2026-06-17
CVSS 3.xMEDIUM 5.9
CVSS:3.x/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N