SUSE-SU-2025:4300-1

Опубликовано: 28 нояб. 2025

Источник: suse-cvrf

Описание

Security update for curl

This update for curl fixes the following issues:

CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757)

Список пакетов

Container bci/bci-sle15-kernel-module-devel:latest

libcurl4-8.14.1-150700.7.5.1

Container bci/gcc:latest

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Container bci/golang:1.25

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Container bci/golang:1.25-openssl

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Container bci/golang:latest

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Container bci/node:22

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Container bci/openjdk:17

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Container bci/openjdk:21

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Container bci/openjdk:latest

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Container bci/php-apache:latest

libcurl4-8.14.1-150700.7.5.1

Container bci/php-fpm:latest

libcurl4-8.14.1-150700.7.5.1

Container bci/php:latest

libcurl4-8.14.1-150700.7.5.1

Container bci/python:3

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Container bci/python:latest

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Container bci/ruby:2

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Container bci/ruby:latest

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Container bci/rust:1.95

libcurl4-8.14.1-150700.7.5.1

Container bci/rust:latest

libcurl4-8.14.1-150700.7.5.1

Container bci/spack:latest

curl-8.14.1-150700.7.5.1

libcurl-devel-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Container private-registry/1.2/harbor-trivy-adapter:latest

libcurl4-8.14.1-150700.7.5.1

Container private-registry/harbor-trivy-adapter:latest

libcurl4-8.14.1-150700.7.5.1

Container suse/git:latest

libcurl4-8.14.1-150700.7.5.1

Container suse/kea:2.6

libcurl4-8.14.1-150700.7.5.1

Container suse/kiosk/firefox-esr:latest

libcurl4-8.14.1-150700.7.5.1

Container suse/multi-linux-manager/5.1/x86_64/proxy-httpd:latest

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Container suse/multi-linux-manager/5.1/x86_64/server-hub-xmlrpc-api:latest

libcurl4-8.14.1-150700.7.5.1

Container suse/multi-linux-manager/5.1/x86_64/server-migration-14-16:latest

libcurl4-8.14.1-150700.7.5.1

Container suse/multi-linux-manager/5.1/x86_64/server-saline:latest

libcurl4-8.14.1-150700.7.5.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Container suse/nginx:1.21

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Container suse/postgres:16

libcurl4-8.14.1-150700.7.5.1

Container suse/postgres:16.14

libcurl4-8.14.1-150700.7.5.1

Container suse/postgres:17

libcurl4-8.14.1-150700.7.5.1

Container suse/postgres:17.10

libcurl4-8.14.1-150700.7.5.1

Container suse/postgres:latest

libcurl4-8.14.1-150700.7.5.1

Container suse/sle15:latest

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-Azure-3P

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-Azure-Basic

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-Azure-Standard

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-BYOS-Azure

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-BYOS-EC2

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-BYOS-GCE

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-CHOST-BYOS-Aliyun

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-CHOST-BYOS-Azure

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-CHOST-BYOS-EC2

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-CHOST-BYOS-GCE

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-CHOST-BYOS-GDC

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-EC2

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-EC2-ECS-HVM

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-GCE

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-GCE-3P

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-HPC-Azure

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-HPC-BYOS-Azure

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-HPC-BYOS-EC2

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-HPC-BYOS-GCE

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-Hardened-BYOS-Azure

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-Hardened-BYOS-EC2

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-Hardened-BYOS-GCE

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-SAP-Azure

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-SAP-Azure-3P

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-SAP-Azure-LI-BYOS-Production

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-SAP-BYOS-Azure

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-SAP-BYOS-EC2

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-SAP-BYOS-GCE

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-SAP-EC2

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-SAP-GCE

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-SAP-GCE-3P

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-SAP-Hardened-Azure

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-SAP-Hardened-GCE

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image SLES15-SP7-SAPCAL-Azure

curl-8.14.1-150700.7.5.1

libcurl-devel-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

libcurl4-32bit-8.14.1-150700.7.5.1

Image SLES15-SP7-SAPCAL-EC2

curl-8.14.1-150700.7.5.1

libcurl-devel-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

libcurl4-32bit-8.14.1-150700.7.5.1

Image SLES15-SP7-SAPCAL-GCE

curl-8.14.1-150700.7.5.1

libcurl-devel-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

libcurl4-32bit-8.14.1-150700.7.5.1

Image monitoring-alertmanager-image

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image monitoring-blackbox_exporter-image

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image monitoring-prometheus-image

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image pr_15_7

libcurl4-8.14.1-150700.7.5.1

Image pr_15_7_1_0

libcurl4-8.14.1-150700.7.5.1

Image proxy-httpd-image

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image proxy-salt-broker-image

libcurl4-8.14.1-150700.7.5.1

Image server-database-migration-image

libcurl4-8.14.1-150700.7.5.1

Image server-hub-xmlrpc-api-image

libcurl4-8.14.1-150700.7.5.1

Image server-image

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image server-image-sles15sp7

curl-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

Image server-migration-14-16-image

libcurl4-8.14.1-150700.7.5.1

Image server-saline-image

libcurl4-8.14.1-150700.7.5.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

curl-8.14.1-150700.7.5.1

libcurl-devel-8.14.1-150700.7.5.1

libcurl4-8.14.1-150700.7.5.1

libcurl4-32bit-8.14.1-150700.7.5.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-20254300-1/
Link for SUSE-SU-2025:4300-1
https://lists.suse.com/pipermail/sle-security-updates/2025-November/023440.html
E-Mail link for SUSE-SU-2025:4300-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1253757
SUSE Bug 1253757
https://www.suse.com/security/cve/CVE-2025-11563/
SUSE CVE CVE-2025-11563 page

Описание

URLs containing percent-encoded slashes (`/` or `\`) can trick wcurl into saving the output file outside of the current directory without the user explicitly asking for it. This flaw only affects the wcurl command line tool.

Затронутые продукты

Container bci/bci-sle15-kernel-module-devel:latest:libcurl4-8.14.1-150700.7.5.1

Container bci/gcc:latest:curl-8.14.1-150700.7.5.1

Container bci/gcc:latest:libcurl4-8.14.1-150700.7.5.1

Container bci/golang:1.25-openssl:curl-8.14.1-150700.7.5.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-11563.html
CVE-2025-11563
https://bugzilla.suse.com/1253757
SUSE Bug 1253757