Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

SUSE 6.1: 2025:20239-1 moderate: curl fixes security issues

suse
Calendar Grey June 4, 2025
Dist Suse Esm H88
The recent curl update on openSUSE tackles several vulnerabilities, bolstering system integrity with significant improvements.
* bsc#1230093 * bsc#1232528 * bsc#1234068 * bsc#1236589

Summary

## This update for curl fixes the following issues: Update to 8.12.1: * Bugfixes: * asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR' * asyn-thread: fix HTTPS RR crash * asyn-thread: fix the returned bitmask from Curl_resolver_getsock * asyn-thread: survive a c-ares channel set to NULL * cmake: always reference OpenSSL and ZLIB via imported targets * cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config' * cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config' * content_encoding: #error on too old zlib * imap: TLS upgrade fix * ldap: drop support for legacy Novell LDAP SDK * libssh2: comparison is always true because rc <= -1 * libssh2: raise lowest supported version to 1.2.8 * libssh: drop support for libssh older than 0.9.0 * openssl-quic: ignore ciphers for h3 * pop3: TLS upgrade fix

Topics%20covered

Topics Covered

security advisory moderate security fix networking SUSE curl

References

* bsc#1230093

* bsc#1232528

* bsc#1234068

* bsc#1236589

Cross-

* CVE-2024-11053

* CVE-2024-8096

* CVE-2024-9681

* CVE-2025-0665

CVSS scores:

* CVE-2024-11053 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

* CVE-2024-11053 ( NVD ): 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

* CVE-2024-8096 ( SUSE ): 6.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

* CVE-2024-8096 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

* CVE-2024-8096 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

* CVE-2024-9681 ( SUSE ): 6.9

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

* CVE-2024-9681 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Announcement ID: SUSE-SU-2025:20239-1
Release Date: 2025-03-13T10:37:02Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate security fix networking SUSE curl

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here