Alerts This Week
Warning Icon 1 697
Alerts This Week
Warning Icon 1 697

openSUSE: curl Moderate Security Fix for 5 Issues 2026:20031-1

opensuse
Calendar Grey January 15, 2026
Dist Opensuse Esm H88
Update addresses 5 bugs and vulnerabilities in curl on openSUSE Leap 16.0. Critical patch to enhance system security.
An update that solves 5 vulnerabilities and has 5 bug fixes can now be installed.

Description

This update for curl fixes the following issues:

This update for curl fixes the following issues:

- CVE-2025-14017: broken TLS options for threaded LDAPS (bsc#1256105).

- CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731).

- CVE-2025-14819: libssh global knownhost override (bsc#1255732).

- CVE-2025-15079: libssh key passphrase bypass without agent set (bsc#1255733).

- CVE-2025-15224: OpenSSL partial chain store policy bypass (bsc#1255734).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-140=1

Patch

Package List

- openSUSE Leap 16.0:

curl-8.14.1-160000.4.1

curl-fish-completion-8.14.1-160000.4.1

curl-zsh-completion-8.14.1-160000.4.1

libcurl-devel-8.14.1-160000.4.1

libcurl-devel-doc-8.14.1-160000.4.1

libcurl4-8.14.1-160000.4.1

References

* bsc#1255731

* bsc#1255732

* bsc#1255733

* bsc#1255734

* bsc#1256105

References:

* https://www.suse.com/security/cve/CVE-2025-14017.html

* https://www.suse.com/security/cve/CVE-2025-14524.html

* https://www.suse.com/security/cve/CVE-2025-14819.html

* https://www.suse.com/security/cve/CVE-2025-15079.html

* https://www.suse.com/security/cve/CVE-2025-15224.html

Announcement ID: openSUSE-SU-2026:20031-1
Rating: moderate
Affected Products: openSUSE Leap 16.0 -------------------------------------------------------------

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here