Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:0119-1

Опубликовано: 13 янв. 2026
Источник: suse-cvrf

Описание

Security update for curl

This update for curl fixes the following issues:

  • CVE-2025-14017: Fixed broken TLS options for threaded LDAPS (bsc#1256105)

Список пакетов

Image SLES12-SP5-Azure-BYOS
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-Azure-HPC-BYOS
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-Azure-HPC-On-Demand
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-Azure-SAP-BYOS
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-Azure-SAP-On-Demand
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-Azure-Standard-On-Demand
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-EC2-BYOS
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-EC2-ECS-On-Demand
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-EC2-On-Demand
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-EC2-SAP-BYOS
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-EC2-SAP-On-Demand
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-GCE-BYOS
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-GCE-On-Demand
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-GCE-SAP-BYOS
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-GCE-SAP-On-Demand
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
curl-8.0.1-11.114.1
libcurl-devel-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
libcurl4-32bit-8.0.1-11.114.1

Описание

When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.


Затронутые продукты
Image SLES12-SP5-Azure-BYOS:curl-8.0.1-11.114.1
Image SLES12-SP5-Azure-BYOS:libcurl4-8.0.1-11.114.1
Image SLES12-SP5-Azure-HPC-BYOS:curl-8.0.1-11.114.1
Image SLES12-SP5-Azure-HPC-BYOS:libcurl4-8.0.1-11.114.1

Ссылки
Уязвимость SUSE-SU-2026:0119-1