Security update for curl SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2026:0221-1 Final 1 1 2026-01-22T12:15:38Z current 2026-01-22T12:15:38Z 2026-01-22T12:15:38Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for curl This update for curl fixes the following issues: - CVE-2025-14017: Fixed broken TLS options for threaded LDAPS (bsc#1256105). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP7-Azure-3P-2026-221,Image SLES15-SP7-Azure-Basic-2026-221,Image SLES15-SP7-Azure-Standard-2026-221,Image SLES15-SP7-BYOS-Azure-2026-221,Image SLES15-SP7-BYOS-EC2-2026-221,Image SLES15-SP7-BYOS-GCE-2026-221,Image SLES15-SP7-GCE-2026-221,Image SLES15-SP7-HPC-Azure-2026-221,Image SLES15-SP7-HPC-BYOS-EC2-2026-221,Image SLES15-SP7-HPC-BYOS-GCE-2026-221,Image SLES15-SP7-Hardened-BYOS-Azure-2026-221,Image SLES15-SP7-Hardened-BYOS-EC2-2026-221,Image SLES15-SP7-Hardened-BYOS-GCE-2026-221,Image SLES15-SP7-SAP-Azure-2026-221,Image SLES15-SP7-SAP-Azure-3P-2026-221,Image SLES15-SP7-SAP-EC2-2026-221,Image SLES15-SP7-SAP-Hardened-Azure-2026-221,Image SLES15-SP7-SAP-Hardened-GCE-2026-221,Image SLES15-SP7-SAPCAL-Azure-2026-221,SUSE-2026-221,SUSE-SLE-Module-Basesystem-15-SP7-2026-221 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2026/suse-su-20260221-1/ Link for SUSE-SU-2026:0221-1 https://lists.suse.com/pipermail/sle-security-updates/2026-January/023864.html E-Mail link for SUSE-SU-2026:0221-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1256105 SUSE Bug 1256105 https://www.suse.com/security/cve/CVE-2025-14017/ SUSE CVE CVE-2025-14017 page Image SLES15-SP7-Azure-3P Image SLES15-SP7-Azure-Basic Image SLES15-SP7-Azure-Standard Image SLES15-SP7-BYOS-Azure Image SLES15-SP7-BYOS-EC2 Image SLES15-SP7-BYOS-GCE Image SLES15-SP7-GCE Image SLES15-SP7-HPC-Azure Image SLES15-SP7-HPC-BYOS-EC2 Image SLES15-SP7-HPC-BYOS-GCE Image SLES15-SP7-Hardened-BYOS-Azure Image SLES15-SP7-Hardened-BYOS-EC2 Image SLES15-SP7-Hardened-BYOS-GCE Image SLES15-SP7-SAP-Azure Image SLES15-SP7-SAP-Azure-3P Image SLES15-SP7-SAP-EC2 Image SLES15-SP7-SAP-Hardened-Azure Image SLES15-SP7-SAP-Hardened-GCE Image SLES15-SP7-SAPCAL-Azure SUSE Linux Enterprise Module for Basesystem 15 SP7 curl-8.14.1-150700.7.11.1 libcurl4-8.14.1-150700.7.11.1 libcurl-devel-8.14.1-150700.7.11.1 libcurl4-32bit-8.14.1-150700.7.11.1 curl-fish-completion-8.14.1-150700.7.11.1 curl-zsh-completion-8.14.1-150700.7.11.1 libcurl-devel-32bit-8.14.1-150700.7.11.1 libcurl-devel-64bit-8.14.1-150700.7.11.1 libcurl-devel-doc-8.14.1-150700.7.11.1 libcurl-mini4-8.14.1-150700.7.11.1 libcurl4-64bit-8.14.1-150700.7.11.1 curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-Azure-3P libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-Azure-3P curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-Azure-Basic libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-Azure-Basic curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-Azure-Standard libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-Azure-Standard curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-BYOS-Azure libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-BYOS-Azure curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-BYOS-EC2 libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-BYOS-EC2 curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-BYOS-GCE libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-BYOS-GCE curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-GCE libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-GCE curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-HPC-Azure libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-HPC-Azure curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-HPC-BYOS-EC2 libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-HPC-BYOS-EC2 curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-HPC-BYOS-GCE libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-HPC-BYOS-GCE curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-Hardened-BYOS-Azure libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-Hardened-BYOS-Azure curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-Hardened-BYOS-EC2 libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-Hardened-BYOS-EC2 curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-Hardened-BYOS-GCE libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-Hardened-BYOS-GCE curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-SAP-Azure libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-SAP-Azure curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-SAP-Azure-3P libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-SAP-Azure-3P curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-SAP-EC2 libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-SAP-EC2 curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-SAP-Hardened-Azure libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-SAP-Hardened-Azure curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-SAP-Hardened-GCE libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-SAP-Hardened-GCE curl-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-SAPCAL-Azure libcurl-devel-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-SAPCAL-Azure libcurl4-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-SAPCAL-Azure libcurl4-32bit-8.14.1-150700.7.11.1 as a component of Image SLES15-SP7-SAPCAL-Azure curl-8.14.1-150700.7.11.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libcurl-devel-8.14.1-150700.7.11.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libcurl4-8.14.1-150700.7.11.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libcurl4-32bit-8.14.1-150700.7.11.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well. CVE-2025-14017 Image SLES15-SP7-Azure-3P:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-Azure-3P:libcurl4-8.14.1-150700.7.11.1 Image SLES15-SP7-Azure-Basic:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-Azure-Basic:libcurl4-8.14.1-150700.7.11.1 Image SLES15-SP7-Azure-Standard:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-Azure-Standard:libcurl4-8.14.1-150700.7.11.1 Image SLES15-SP7-BYOS-Azure:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-BYOS-Azure:libcurl4-8.14.1-150700.7.11.1 Image SLES15-SP7-BYOS-EC2:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-BYOS-EC2:libcurl4-8.14.1-150700.7.11.1 Image SLES15-SP7-BYOS-GCE:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-BYOS-GCE:libcurl4-8.14.1-150700.7.11.1 Image SLES15-SP7-GCE:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-GCE:libcurl4-8.14.1-150700.7.11.1 Image SLES15-SP7-HPC-Azure:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-HPC-Azure:libcurl4-8.14.1-150700.7.11.1 Image SLES15-SP7-HPC-BYOS-EC2:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-HPC-BYOS-EC2:libcurl4-8.14.1-150700.7.11.1 Image SLES15-SP7-HPC-BYOS-GCE:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-HPC-BYOS-GCE:libcurl4-8.14.1-150700.7.11.1 Image SLES15-SP7-Hardened-BYOS-Azure:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-Hardened-BYOS-Azure:libcurl4-8.14.1-150700.7.11.1 Image SLES15-SP7-Hardened-BYOS-EC2:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-Hardened-BYOS-EC2:libcurl4-8.14.1-150700.7.11.1 Image SLES15-SP7-Hardened-BYOS-GCE:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-Hardened-BYOS-GCE:libcurl4-8.14.1-150700.7.11.1 Image SLES15-SP7-SAP-Azure-3P:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-SAP-Azure-3P:libcurl4-8.14.1-150700.7.11.1 Image SLES15-SP7-SAP-Azure:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-SAP-Azure:libcurl4-8.14.1-150700.7.11.1 Image SLES15-SP7-SAP-EC2:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-SAP-EC2:libcurl4-8.14.1-150700.7.11.1 Image SLES15-SP7-SAP-Hardened-Azure:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-SAP-Hardened-Azure:libcurl4-8.14.1-150700.7.11.1 Image SLES15-SP7-SAP-Hardened-GCE:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-SAP-Hardened-GCE:libcurl4-8.14.1-150700.7.11.1 Image SLES15-SP7-SAPCAL-Azure:curl-8.14.1-150700.7.11.1 Image SLES15-SP7-SAPCAL-Azure:libcurl-devel-8.14.1-150700.7.11.1 Image SLES15-SP7-SAPCAL-Azure:libcurl4-32bit-8.14.1-150700.7.11.1 Image SLES15-SP7-SAPCAL-Azure:libcurl4-8.14.1-150700.7.11.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:curl-8.14.1-150700.7.11.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libcurl-devel-8.14.1-150700.7.11.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libcurl4-32bit-8.14.1-150700.7.11.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libcurl4-8.14.1-150700.7.11.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2026/suse-su-20260221-1/ https://www.suse.com/security/cve/CVE-2025-14017.html CVE-2025-14017 https://bugzilla.suse.com/1256105 SUSE Bug 1256105