< back to search

shield Security update for curl

SUSE-SLE-Micro-6.0-239

This update for curl fixes the following issues: Security issues fixed: - CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590) - CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588) Other issues fixed: - Make sure the TLS handshake after a successful STARTTLS command is fully done before further sending/receiving on the connection. (bsc#1235151)

Release Date

Mar 12 2025
References

Bugzilla: 1235151, 1236588, 1236590
CVEs: CVE-2025-0167, CVE-2025-0725
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Micro 6.0 aarch64

Packages

curl
A Tool for Transferring Data from URLs

8.6.0-6.1 lock rpm

libcurl4
Library for transferring data from URLs

8.6.0-6.1 lock rpm

SUSE Linux Micro 6.0 s390x

Packages

curl
A Tool for Transferring Data from URLs

8.6.0-6.1 lock rpm

libcurl4
Library for transferring data from URLs

8.6.0-6.1 lock rpm

SUSE Linux Micro 6.0 x86_64

Packages

curl
A Tool for Transferring Data from URLs

8.6.0-6.1 lock rpm

libcurl4
Library for transferring data from URLs

8.6.0-6.1 lock rpm