SUSE-SU-2025:0370-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 05 Feb 2025, 15:34
Last modified:04 Feb 2026, 04:28

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

05 Feb 2025, 15:34
Published
Vulnerability first disclosed
04 Feb 2026, 04:28
Last Modified
Vulnerability information updated

Description

Security update for curl This update for curl fixes the following issues: - CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590) - CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588)

Affected Systems

  • suse•curl&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

    < 8.0.1-150400.5.62.1

  • suse•curl&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

    < 8.0.1-150400.5.62.1

  • suse•curl&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

    < 8.0.1-150400.5.62.1

  • suse•curl&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

    < 8.0.1-150400.5.62.1

  • suse•curl&distro=SUSE Linux Enterprise Installer Updates 15 SP4

    < 8.0.1-150400.5.62.1

  • suse•curl&distro=SUSE Linux Enterprise Installer Updates 15 SP5

    < 8.0.1-150400.5.62.1

  • suse•curl&distro=SUSE Linux Enterprise Micro 5.3

    < 8.0.1-150400.5.62.1

  • suse•curl&distro=SUSE Linux Enterprise Micro 5.4

    < 8.0.1-150400.5.62.1

  • suse•curl&distro=SUSE Linux Enterprise Micro 5.5

    < 8.0.1-150400.5.62.1

  • suse•curl&distro=SUSE Linux Enterprise Server 15 SP4-LTSS

    < 8.0.1-150400.5.62.1

  • suse•curl&distro=SUSE Linux Enterprise Server 15 SP5-LTSS

    < 8.0.1-150400.5.62.1

  • suse•curl&distro=SUSE Manager Server 4.3

    < 8.0.1-150400.5.62.1

References (5)