Описание
Security update for curl
This update for curl fixes the following issues:
- CVE-2025-14017: Fixed broken TLS options for threaded LDAPS (bsc#1256105)
Список пакетов
Image SLES12-SP5-Azure-BYOS
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-Azure-HPC-BYOS
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-Azure-HPC-On-Demand
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-Azure-SAP-BYOS
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-Azure-SAP-On-Demand
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-Azure-Standard-On-Demand
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-EC2-BYOS
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-EC2-ECS-On-Demand
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-EC2-On-Demand
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-EC2-SAP-BYOS
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-EC2-SAP-On-Demand
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-GCE-BYOS
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-GCE-On-Demand
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-GCE-SAP-BYOS
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-GCE-SAP-On-Demand
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
curl-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
curl-8.0.1-11.114.1
libcurl-devel-8.0.1-11.114.1
libcurl4-8.0.1-11.114.1
libcurl4-32bit-8.0.1-11.114.1
Ссылки
- Link for SUSE-SU-2026:0119-1
- E-Mail link for SUSE-SU-2026:0119-1
- SUSE Security Ratings
- SUSE Bug 1256105
- SUSE CVE CVE-2025-14017 page
Описание
When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.
Затронутые продукты
Image SLES12-SP5-Azure-BYOS:curl-8.0.1-11.114.1
Image SLES12-SP5-Azure-BYOS:libcurl4-8.0.1-11.114.1
Image SLES12-SP5-Azure-HPC-BYOS:curl-8.0.1-11.114.1
Image SLES12-SP5-Azure-HPC-BYOS:libcurl4-8.0.1-11.114.1
Ссылки
- CVE-2025-14017
- SUSE Bug 1256105