< back to search

gpp_maybe Security update for curl

SUSE-SLE-Micro-6.1-254

This update for curl fixes the following issues: - CVE-2025-5399: libcurl can possibly get trapped in an endless busy-loop when processing specially crafted packets (bsc#1243933). - CVE-2025-5025: No QUIC certificate pinning with wolfSSL (bsc#1243706). - CVE-2025-4947: QUIC certificate check skip with wolfSSL (bsc#1243397). Other bugfixes: - Fix the --ftp-pasv option in curl v8.14.1 (bsc#1246197).

Release Date

Sep 9 2025
References

Bugzilla: 1243397, 1243706, 1243933, 1246197
CVEs: CVE-2025-4947, CVE-2025-5025, CVE-2025-5399
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Micro 6.1 s390x

Packages

curl
A Tool for Transferring Data from URLs

8.14.1-slfo.1.1_1.1 lock rpm

libcurl4
Library for transferring data from URLs

8.14.1-slfo.1.1_1.1 lock rpm

SUSE Linux Micro 6.1 ppc64le

Packages

curl
A Tool for Transferring Data from URLs

8.14.1-slfo.1.1_1.1 lock rpm

libcurl4
Library for transferring data from URLs

8.14.1-slfo.1.1_1.1 lock rpm

SUSE Linux Micro 6.1 aarch64

Packages

curl
A Tool for Transferring Data from URLs

8.14.1-slfo.1.1_1.1 lock rpm

libcurl4
Library for transferring data from URLs

8.14.1-slfo.1.1_1.1 lock rpm

SUSE Linux Micro 6.1 x86_64

Packages

curl
A Tool for Transferring Data from URLs

8.14.1-slfo.1.1_1.1 lock rpm

libcurl4
Library for transferring data from URLs

8.14.1-slfo.1.1_1.1 lock rpm