Alerts This Week
Warning Icon 1 1,394
Alerts This Week
Warning Icon 1 1,394

Mageia 9: curl Important Security Issues OpenSSL Bypass MGASA-2026-0003

mageia
Calendar Grey January 10, 2026
Dist Mageia Esm H88
Updated curl packages in Mageia fix multiple important issues, including token leak and OpenSSL bypass vulnerabilities.
MGASA-2026-0003 - Updated curl packages fix security vulnerabilities

Summary

Description: curl is susceptible to a number of low severity security vulnerabilities: CVE-2025-14524: bearer token leak on cross-protocol redirect CVE-2025-14819: OpenSSL partial chain store policy bypass CVE-2025-15079: libssh knownhosts file vulnerability CVE-2025-15224: libssh key passphrase bypass vulnerability This release fixes these issues.

References

- https://bugs.mageia.org/show_bug.cgi?id=34944

- https://curl.se/docs/vuln-7.88.1.html

- https://www.cve.org/CVERecord?id=CVE-2025-13034

- https://www.cve.org/CVERecord?id=CVE-2025-14017

- https://www.cve.org/CVERecord?id=CVE-2025-14524

- https://www.cve.org/CVERecord?id=CVE-2025-14819

- https://www.cve.org/CVERecord?id=CVE-2025-15079

- https://www.cve.org/CVERecord?id=CVE-2025-15224

Topics%20covered

Topics Covered

security advisory important curl Mageia token leak openssl bypass

Resolution

SRPMS

- 9/core/curl-7.88.1-4.9.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 10 Jan 2026
URL: https://advisories.mageia.org/MGASA-2026-0003.html
Type: security
CVE: CVE-2025-13034, CVE-2025-14017, CVE-2025-14524, CVE-2025-14819, CVE-2025-15079, CVE-2025-15224

Topics%20covered

Topics Covered

security advisory important curl Mageia token leak openssl bypass

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here