Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

SUSE-SU-2026:0051-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2026:0051-1

UNKNOWN

Security update for curl

Published Jan 7, 2026

Modified 1 weeks ago

Fix available

Details

This update for curl fixes the following issues:

CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731).
CVE-2025-14819: libssh global knownhost override (bsc#1255732).
CVE-2025-15079: libssh key passphrase bypass without agent set (bsc#1255733).
CVE-2025-15224: OpenSSL partial chain store policy bypass (bsc#1255734).

Affected Packages

SUSE:Linux Enterprise Micro 5.2curl

Fixed in:

8.14.1-150200.4.97.1

SUSE:Linux Enterprise Micro 5.2libcurl4

Fixed in:

8.14.1-150200.4.97.1

References

REPORThttps://bugzilla.suse.com/1255731 REPORThttps://bugzilla.suse.com/1255732 REPORThttps://bugzilla.suse.com/1255733 REPORThttps://bugzilla.suse.com/1255734 WEBhttps://www.suse.com/security/cve/CVE-2025-14524 WEBhttps://www.suse.com/security/cve/CVE-2025-14819 WEBhttps://www.suse.com/security/cve/CVE-2025-15079 WEBhttps://www.suse.com/security/cve/CVE-2025-15224 ADVISORYhttps://www.suse.com/support/update/announcement/2026/suse-su-20260051-1/

Upstream

CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224

Related

CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224

Ecosystems

SUSE Linux Enterprise Micro 5.2

Timeline

PublishedJan 7, 2026

ModifiedJan 7, 2026