SUSE-SU-2026:20042-1

csafDEsuse_csaf

Security update for curl

Advisory ansehen veröffentlicht 2026-01-08

Security update for curl

01

beschreibt (4)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-15224US——
When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent.
CVE-2025-15079US——
When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in the specified…
CVE-2025-14819US——
When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memo…
CVE-2025-14524US——
When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (24)

  • Behobencurl-0:8.14.1-3.1.aarch64 as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobencurl-0:8.14.1-3.1.aarch64 as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobencurl-0:8.14.1-3.1.aarch64 as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobencurl-0:8.14.1-3.1.aarch64 as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobencurl-0:8.14.1-3.1.s390x as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobencurl-0:8.14.1-3.1.s390x as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobencurl-0:8.14.1-3.1.s390x as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobencurl-0:8.14.1-3.1.s390x as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobencurl-0:8.14.1-3.1.x86_64 as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobencurl-0:8.14.1-3.1.x86_64 as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobencurl-0:8.14.1-3.1.x86_64 as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobencurl-0:8.14.1-3.1.x86_64 as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibcurl4-0:8.14.1-3.1.aarch64 as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibcurl4-0:8.14.1-3.1.aarch64 as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibcurl4-0:8.14.1-3.1.aarch64 as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibcurl4-0:8.14.1-3.1.aarch64 as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibcurl4-0:8.14.1-3.1.s390x as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibcurl4-0:8.14.1-3.1.s390x as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibcurl4-0:8.14.1-3.1.s390x as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibcurl4-0:8.14.1-3.1.s390x as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibcurl4-0:8.14.1-3.1.x86_64 as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibcurl4-0:8.14.1-3.1.x86_64 as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibcurl4-0:8.14.1-3.1.x86_64 as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibcurl4-0:8.14.1-3.1.x86_64 as component of SUSE Linux Micro 6.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan