SUSE-SU-2026:0051-1

csafDEsuse_csaf

Security update for curl

view advisory published 2026-01-07

Security update for curl

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2025-15224US——
When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent.
CVE-2025-15079US——
When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in the specified…
CVE-2025-14819US——
When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memo…
CVE-2025-14524US——
When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl…
02

references

External citations — patches, advisories, analysis.

03

remediations (24)

  • Fixedcurl-0:8.14.1-150200.4.97.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedcurl-0:8.14.1-150200.4.97.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedcurl-0:8.14.1-150200.4.97.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedcurl-0:8.14.1-150200.4.97.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedcurl-0:8.14.1-150200.4.97.1.s390x as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedcurl-0:8.14.1-150200.4.97.1.s390x as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedcurl-0:8.14.1-150200.4.97.1.s390x as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedcurl-0:8.14.1-150200.4.97.1.s390x as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedcurl-0:8.14.1-150200.4.97.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedcurl-0:8.14.1-150200.4.97.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedcurl-0:8.14.1-150200.4.97.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedcurl-0:8.14.1-150200.4.97.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcurl4-0:8.14.1-150200.4.97.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcurl4-0:8.14.1-150200.4.97.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcurl4-0:8.14.1-150200.4.97.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcurl4-0:8.14.1-150200.4.97.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcurl4-0:8.14.1-150200.4.97.1.s390x as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcurl4-0:8.14.1-150200.4.97.1.s390x as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcurl4-0:8.14.1-150200.4.97.1.s390x as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcurl4-0:8.14.1-150200.4.97.1.s390x as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcurl4-0:8.14.1-150200.4.97.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcurl4-0:8.14.1-150200.4.97.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcurl4-0:8.14.1-150200.4.97.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcurl4-0:8.14.1-150200.4.97.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan