Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:0119-1

Опубликовано: 13 янв. 2026
Источник: suse-cvrf

Описание

Security update for curl

This update for curl fixes the following issues:

  • CVE-2025-14017: Fixed broken TLS options for threaded LDAPS (bsc#1256105)

Список пакетов

Container suse/ltss/sle12.5/sles12sp5:latest
libcurl4-8.0.1-11.114.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
curl-8.0.1-11.114.1
libcurl-devel-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
libcurl4-32bit-8.0.1-11.114.1

Ссылки

Описание

When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.

Затронутые продукты
Container suse/ltss/sle12.5/sles12sp5:latest:libcurl4-8.0.1-11.114.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:curl-8.0.1-11.114.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libcurl-devel-8.0.1-11.114.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libcurl4-32bit-8.0.1-11.114.1
Ссылки