SUSE-SU-2026:0052-1

Опубликовано: 07 янв. 2026

Источник: suse-cvrf

Описание

Security update for curl

This update for curl fixes the following issues:

CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731).
CVE-2025-14819: libssh global knownhost override (bsc#1255732).
CVE-2025-15079: libssh key passphrase bypass without agent set (bsc#1255733).
CVE-2025-15224: OpenSSL partial chain store policy bypass (bsc#1255734).

Список пакетов

Container bci/bci-sle15-kernel-module-devel:latest

libcurl4-8.14.1-150700.7.8.1

Container bci/gcc:latest

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Container bci/golang:1.25

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Container bci/golang:1.25-openssl

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Container bci/golang:latest

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Container bci/node:22

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Container bci/openjdk:17

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Container bci/openjdk:21

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Container bci/openjdk:latest

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Container bci/php-apache:latest

libcurl4-8.14.1-150700.7.8.1

Container bci/php-fpm:latest

libcurl4-8.14.1-150700.7.8.1

Container bci/php:latest

libcurl4-8.14.1-150700.7.8.1

Container bci/python:3

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Container bci/python:latest

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Container bci/ruby:2

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Container bci/ruby:latest

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Container bci/rust:1.95

libcurl4-8.14.1-150700.7.8.1

Container bci/rust:latest

libcurl4-8.14.1-150700.7.8.1

Container bci/spack:latest

curl-8.14.1-150700.7.8.1

libcurl-devel-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Container private-registry/1.2/harbor-trivy-adapter:latest

libcurl4-8.14.1-150700.7.8.1

Container private-registry/harbor-trivy-adapter:latest

libcurl4-8.14.1-150700.7.8.1

Container suse/git:latest

libcurl4-8.14.1-150700.7.8.1

Container suse/kea:2.6

libcurl4-8.14.1-150700.7.8.1

Container suse/kiosk/firefox-esr:latest

libcurl4-8.14.1-150700.7.8.1

Container suse/multi-linux-manager/5.1/x86_64/proxy-httpd:latest

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Container suse/multi-linux-manager/5.1/x86_64/server-hub-xmlrpc-api:latest

libcurl4-8.14.1-150700.7.8.1

Container suse/multi-linux-manager/5.1/x86_64/server-migration-14-16:latest

libcurl4-8.14.1-150700.7.8.1

Container suse/multi-linux-manager/5.1/x86_64/server-postgresql:latest

libcurl4-8.14.1-150700.7.8.1

Container suse/multi-linux-manager/5.1/x86_64/server-saline:latest

libcurl4-8.14.1-150700.7.8.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Container suse/nginx:1.21

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Container suse/postgres:16

libcurl4-8.14.1-150700.7.8.1

Container suse/postgres:16.14

libcurl4-8.14.1-150700.7.8.1

Container suse/postgres:17

libcurl4-8.14.1-150700.7.8.1

Container suse/postgres:17.10

libcurl4-8.14.1-150700.7.8.1

Container suse/postgres:latest

libcurl4-8.14.1-150700.7.8.1

Container suse/sle15:latest

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-Azure-3P

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-Azure-Basic

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-Azure-Standard

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-BYOS-Azure

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-BYOS-EC2

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-BYOS-GCE

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-CHOST-BYOS-Aliyun

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-CHOST-BYOS-Azure

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-CHOST-BYOS-EC2

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-CHOST-BYOS-GCE

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-CHOST-BYOS-GDC

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-EC2

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-EC2-ECS-HVM

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-GCE

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-GCE-3P

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-HPC-Azure

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-HPC-BYOS-Azure

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-HPC-BYOS-EC2

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-HPC-BYOS-GCE

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-Hardened-BYOS-Azure

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-Hardened-BYOS-EC2

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-Hardened-BYOS-GCE

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-SAP-Azure

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-SAP-Azure-3P

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-SAP-Azure-LI-BYOS-Production

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-SAP-BYOS-Azure

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-SAP-BYOS-EC2

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-SAP-BYOS-GCE

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-SAP-EC2

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-SAP-GCE

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-SAP-GCE-3P

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-SAP-Hardened-Azure

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-SAP-Hardened-GCE

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image SLES15-SP7-SAPCAL-Azure

curl-8.14.1-150700.7.8.1

libcurl-devel-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

libcurl4-32bit-8.14.1-150700.7.8.1

Image SLES15-SP7-SAPCAL-EC2

curl-8.14.1-150700.7.8.1

libcurl-devel-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

libcurl4-32bit-8.14.1-150700.7.8.1

Image SLES15-SP7-SAPCAL-GCE

curl-8.14.1-150700.7.8.1

libcurl-devel-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

libcurl4-32bit-8.14.1-150700.7.8.1

Image monitoring-alertmanager-image

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image monitoring-blackbox_exporter-image

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image monitoring-prometheus-image

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image pr_15_7

libcurl4-8.14.1-150700.7.8.1

Image pr_15_7_1_0

libcurl4-8.14.1-150700.7.8.1

Image proxy-httpd-image

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image proxy-salt-broker-image

libcurl4-8.14.1-150700.7.8.1

Image server-database-migration-image

libcurl4-8.14.1-150700.7.8.1

Image server-hub-xmlrpc-api-image

libcurl4-8.14.1-150700.7.8.1

Image server-image

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image server-image-sles15sp7

curl-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

Image server-migration-14-16-image

libcurl4-8.14.1-150700.7.8.1

Image server-saline-image

libcurl4-8.14.1-150700.7.8.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

curl-8.14.1-150700.7.8.1

libcurl-devel-8.14.1-150700.7.8.1

libcurl4-8.14.1-150700.7.8.1

libcurl4-32bit-8.14.1-150700.7.8.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20260052-1/
Link for SUSE-SU-2026:0052-1
https://lists.suse.com/pipermail/sle-security-updates/2026-January/023696.html
E-Mail link for SUSE-SU-2026:0052-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1255731
SUSE Bug 1255731
https://bugzilla.suse.com/1255732
SUSE Bug 1255732
https://bugzilla.suse.com/1255733
SUSE Bug 1255733
https://bugzilla.suse.com/1255734
SUSE Bug 1255734
https://www.suse.com/security/cve/CVE-2025-14524/
SUSE CVE CVE-2025-14524 page
https://www.suse.com/security/cve/CVE-2025-14819/
SUSE CVE CVE-2025-14819 page
https://www.suse.com/security/cve/CVE-2025-15079/
SUSE CVE CVE-2025-15079 page
https://www.suse.com/security/cve/CVE-2025-15224/
SUSE CVE CVE-2025-15224 page

Описание

When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host.

Затронутые продукты

Container bci/bci-sle15-kernel-module-devel:latest:libcurl4-8.14.1-150700.7.8.1

Container bci/gcc:latest:curl-8.14.1-150700.7.8.1

Container bci/gcc:latest:libcurl4-8.14.1-150700.7.8.1

Container bci/golang:1.25-openssl:curl-8.14.1-150700.7.8.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-14524.html
CVE-2025-14524
https://bugzilla.suse.com/1255731
SUSE Bug 1255731

Описание

When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcurl find and accept a trust chain that it otherwise would not.

Затронутые продукты

Container bci/bci-sle15-kernel-module-devel:latest:libcurl4-8.14.1-150700.7.8.1

Container bci/gcc:latest:curl-8.14.1-150700.7.8.1

Container bci/gcc:latest:libcurl4-8.14.1-150700.7.8.1

Container bci/golang:1.25-openssl:curl-8.14.1-150700.7.8.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-14819.html
CVE-2025-14819
https://bugzilla.suse.com/1255732
SUSE Bug 1255732

Описание

When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in the specified file if they were added as recognized in the libssh *global* known_hosts file.

Затронутые продукты

Container bci/bci-sle15-kernel-module-devel:latest:libcurl4-8.14.1-150700.7.8.1

Container bci/gcc:latest:curl-8.14.1-150700.7.8.1

Container bci/gcc:latest:libcurl4-8.14.1-150700.7.8.1

Container bci/golang:1.25-openssl:curl-8.14.1-150700.7.8.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-15079.html
CVE-2025-15079
https://bugzilla.suse.com/1255733
SUSE Bug 1255733

Описание

When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent.

Затронутые продукты

Container bci/bci-sle15-kernel-module-devel:latest:libcurl4-8.14.1-150700.7.8.1

Container bci/gcc:latest:curl-8.14.1-150700.7.8.1

Container bci/gcc:latest:libcurl4-8.14.1-150700.7.8.1

Container bci/golang:1.25-openssl:curl-8.14.1-150700.7.8.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-15224.html
CVE-2025-15224
https://bugzilla.suse.com/1255734
SUSE Bug 1255734