Security update for curl
Security update for curl
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-15224US | — | — | ||
When doing SSH-based transfers using either SCP or SFTP, and asked to do
public key authentication, curl would wrongly still ask and authenticate using
a locally running SSH agent. | ||||
| CVE-2025-15079US | — | — | ||
When doing SSH-based transfers using either SCP or SFTP, and setting the
known_hosts file, libcurl could still mistakenly accept connecting to hosts
*not present* in the specified… | ||||
| CVE-2025-14819US | — | — | ||
When doing TLS related transfers with reused easy or multi handles and
altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally
reuse a CA store cached in memo… | ||||
| CVE-2025-14524US | — | — | ||
When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer
performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP,
POP3 or SMTP scheme, curl… | ||||
references
External citations — patches, advisories, analysis.
remediations (24)
- Fixedcurl-0:8.14.1-3.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedcurl-0:8.14.1-3.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedcurl-0:8.14.1-3.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedcurl-0:8.14.1-3.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedcurl-0:8.14.1-3.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedcurl-0:8.14.1-3.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedcurl-0:8.14.1-3.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedcurl-0:8.14.1-3.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedcurl-0:8.14.1-3.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedcurl-0:8.14.1-3.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedcurl-0:8.14.1-3.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedcurl-0:8.14.1-3.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl4-0:8.14.1-3.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl4-0:8.14.1-3.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl4-0:8.14.1-3.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl4-0:8.14.1-3.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl4-0:8.14.1-3.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl4-0:8.14.1-3.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl4-0:8.14.1-3.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl4-0:8.14.1-3.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl4-0:8.14.1-3.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl4-0:8.14.1-3.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl4-0:8.14.1-3.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibcurl4-0:8.14.1-3.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan