shield Security update for curl

SUSE-SLE-Module-Basesystem-15-SP7-2026-52

This update for curl fixes the following issues: - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731). - CVE-2025-14819: libssh global knownhost override (bsc#1255732). - CVE-2025-15079: libssh key passphrase bypass without agent set (bsc#1255733). - CVE-2025-15224: OpenSSL partial chain store policy bypass (bsc#1255734).

• Release Date
  Jan 7 2026
• References
  Bugzilla: 1255731, 1255734, 1255733, 1255732
  CVEs: CVE-2025-15079, CVE-2025-14819, CVE-2025-14524, CVE-2025-15224
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.7 ppc64le

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-150700.7.8.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.14.1-150700.7.8.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150700.7.8.1 lock rpm

Basesystem Module 15.7 s390x

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-150700.7.8.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.14.1-150700.7.8.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150700.7.8.1 lock rpm

Basesystem Module 15.7 aarch64

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-150700.7.8.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.14.1-150700.7.8.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150700.7.8.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  curl
  A Tool for Transferring Data from URLs

  8.14.1-150700.7.8.1 lock rpm lock src

  libcurl-devel
  Development files for the curl library

  8.14.1-150700.7.8.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150700.7.8.1 lock rpm

  libcurl4-32bit
  Library for transferring data from URLs

  8.14.1-150700.7.8.1 lock rpm