SUSE-SU-2025:4236-1

Опубликовано: 25 нояб. 2025

Источник: suse-cvrf

Описание

Security update for curl

This update for curl fixes the following issues:

CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757)

Список пакетов

Container bci/bci-sle15-kernel-module-devel:15.6

libcurl4-8.14.1-150600.4.31.1

Container bci/node:20

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Container bci/python:3

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Container bci/spack:0.23

curl-8.14.1-150600.4.31.1

libcurl-devel-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Container containers/lmcache-lmstack-router:0

libcurl4-8.14.1-150600.4.31.1

Container containers/milvus:2.4

libcurl4-8.14.1-150600.4.31.1

Container containers/open-webui-mcpo:0

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Container containers/open-webui-pipelines:0

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Container containers/open-webui:0

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Container containers/pytorch:2-nvidia

libcurl4-8.14.1-150600.4.31.1

Container containers/vllm-openai:0

libcurl4-8.14.1-150600.4.31.1

Container private-registry/harbor-db:latest

libcurl4-8.14.1-150600.4.31.1

Container private-registry/harbor-trivy-adapter:latest

libcurl4-8.14.1-150600.4.31.1

Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Container suse/ltss/sle15.6/sle15:latest

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Container suse/manager/5.0/x86_64/proxy-httpd:latest

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Container suse/manager/5.0/x86_64/proxy-salt-broker:latest

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Container suse/manager/5.0/x86_64/server-hub-xmlrpc-api:latest

libcurl4-8.14.1-150600.4.31.1

Container suse/manager/5.0/x86_64/server-migration-14-16:latest

libcurl4-8.14.1-150600.4.31.1

Container suse/manager/5.0/x86_64/server:latest

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Container suse/sle15:15.6

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-Azure-3P

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-Azure-Basic

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-Azure-Standard

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-BYOS

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-BYOS-Azure

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-BYOS-EC2

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-BYOS-GCE

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-CHOST-BYOS

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-CHOST-BYOS-Azure

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-CHOST-BYOS-EC2

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-CHOST-BYOS-GCE

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-CHOST-BYOS-GDC

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-EC2

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-EC2-ECS-HVM

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-GCE

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-HPC

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-HPC-Azure

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-HPC-BYOS

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-HPC-BYOS-Azure

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-HPC-BYOS-EC2

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-HPC-BYOS-GCE

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-HPC-EC2

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-HPC-GCE

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-Hardened-BYOS

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-Hardened-BYOS-Azure

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-Hardened-BYOS-EC2

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-Hardened-BYOS-GCE

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP

curl-8.14.1-150600.4.31.1

libcurl-devel-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

libcurl4-32bit-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-Azure

curl-8.14.1-150600.4.31.1

libcurl-devel-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

libcurl4-32bit-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-Azure-3P

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-BYOS

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-BYOS-Azure

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-BYOS-EC2

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-BYOS-GCE

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-EC2

curl-8.14.1-150600.4.31.1

libcurl-devel-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

libcurl4-32bit-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-GCE

curl-8.14.1-150600.4.31.1

libcurl-devel-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

libcurl4-32bit-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-Hardened

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-Hardened-Azure

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-Hardened-BYOS

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-Hardened-EC2

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-SAP-Hardened-GCE

curl-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

Image SLES15-SP6-SAPCAL

curl-8.14.1-150600.4.31.1

libcurl-devel-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

libcurl4-32bit-8.14.1-150600.4.31.1

Image SLES15-SP6-SAPCAL-Azure

curl-8.14.1-150600.4.31.1

libcurl-devel-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

libcurl4-32bit-8.14.1-150600.4.31.1

Image SLES15-SP6-SAPCAL-EC2

curl-8.14.1-150600.4.31.1

libcurl-devel-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

libcurl4-32bit-8.14.1-150600.4.31.1

Image SLES15-SP6-SAPCAL-GCE

curl-8.14.1-150600.4.31.1

libcurl-devel-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

libcurl4-32bit-8.14.1-150600.4.31.1

Image ai_15_6

libcurl4-8.14.1-150600.4.31.1

SUSE Linux Enterprise Module for Basesystem 15 SP6

curl-8.14.1-150600.4.31.1

libcurl-devel-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

libcurl4-32bit-8.14.1-150600.4.31.1

openSUSE Leap 15.6

curl-8.14.1-150600.4.31.1

libcurl-devel-8.14.1-150600.4.31.1

libcurl-devel-32bit-8.14.1-150600.4.31.1

libcurl4-8.14.1-150600.4.31.1

libcurl4-32bit-8.14.1-150600.4.31.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-20254236-1/
Link for SUSE-SU-2025:4236-1
https://lists.suse.com/pipermail/sle-security-updates/2025-November/023363.html
E-Mail link for SUSE-SU-2025:4236-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1253757
SUSE Bug 1253757
https://www.suse.com/security/cve/CVE-2025-11563/
SUSE CVE CVE-2025-11563 page

Описание

URLs containing percent-encoded slashes (`/` or `\`) can trick wcurl into saving the output file outside of the current directory without the user explicitly asking for it. This flaw only affects the wcurl command line tool.

Затронутые продукты

Container bci/bci-sle15-kernel-module-devel:15.6:libcurl4-8.14.1-150600.4.31.1

Container bci/node:20:curl-8.14.1-150600.4.31.1

Container bci/node:20:libcurl4-8.14.1-150600.4.31.1

Container bci/python:3:curl-8.14.1-150600.4.31.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-11563.html
CVE-2025-11563
https://bugzilla.suse.com/1253757
SUSE Bug 1253757