gpp_maybe Security update for curl

SUSE-SUSE-MicroOS-5.2-2025-3268

This update for curl fixes the following issues: Security issues fixed: - CVE-2025-9086: bug in patch comparison logic when processing cookies can lead to out-of-bounds read in heap buffer (bsc#1249191). - CVE-2025-10148: predictable websocket mask can lead to proxy cache poisoning by malicious server (bsc#1249348). Other issues fixed: - Fix the --ftp-pasv option in curl v8.14.1 (bsc#1246197). * tool_getparam: fix --ftp-pasv [5f805ee] - Update to version 8.14.1 (jsc#PED-13055, jsc#PED-13056). * TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs. * websocket: add option to disable auto-pong reply. * huge number of bugfixes. Please see https://curl.se/ch/ for full changelogs.

• Release Date
  Sep 18 2025
• References
  Bugzilla: 1246197, 1249348, 1249191, 1249367
  CVEs: CVE-2025-9086, CVE-2025-10148
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Micro for Rancher 5.2 aarch64

• Packages
  brotli
  Lossless Compression Algorithm

  1.0.7-150200.3.5.1 lock src

  curl
  A Tool for Transferring Data from URLs

  8.14.1-150200.4.91.1 lock rpm lock src

  libbrotlicommon1
  Common Library for Brotli Compression

  1.0.7-150200.3.5.1 lock rpm

  libbrotlidec1
  Library for Brotli Decompression

  1.0.7-150200.3.5.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150200.4.91.1 lock rpm

SUSE Linux Enterprise Micro 5.2 s390x

• Packages
  brotli
  Lossless Compression Algorithm

  1.0.7-150200.3.5.1 lock src

  curl
  A Tool for Transferring Data from URLs

  8.14.1-150200.4.91.1 lock rpm lock src

  libbrotlicommon1
  Common Library for Brotli Compression

  1.0.7-150200.3.5.1 lock rpm

  libbrotlidec1
  Library for Brotli Decompression

  1.0.7-150200.3.5.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150200.4.91.1 lock rpm

SUSE Linux Enterprise Micro for Rancher 5.2 x86_64

• Packages
  brotli
  Lossless Compression Algorithm

  1.0.7-150200.3.5.1 lock src

  curl
  A Tool for Transferring Data from URLs

  8.14.1-150200.4.91.1 lock rpm lock src

  libbrotlicommon1
  Common Library for Brotli Compression

  1.0.7-150200.3.5.1 lock rpm

  libbrotlidec1
  Library for Brotli Decompression

  1.0.7-150200.3.5.1 lock rpm

  libcurl4
  Library for transferring data from URLs

  8.14.1-150200.4.91.1 lock rpm