SUSE-SU-2025%3A0370-1

SUSE-SU-2025%3A0370-1 PUBLISHED CVSS 4.300000190734863 MEDIUM

This update for curl fixes the following issues: - CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590) - CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588)

Risk Scores

CVSS 3.1

4.300000190734863

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected Products

Vendor	Product	Versions
	libcurl
	curl
	SUSE Linux Enterprise Installer Updates 15 SP4
	libcurl4

Timeline

Feb 5, 2025 CVE Published
Oct 31, 2026 Security Advisory

References

https://www.suse.com/support/security/rating/ url
https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_0370-1.json advisory
https://www.suse.com/support/update/announcement/2025/suse-su-20250370-1/ advisory
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2ECCI3BAXLHLUGPYD4ZUE4JHXTHZWYAK/ advisory
https://bugzilla.suse.com/1236588 advisory
https://bugzilla.suse.com/1236590 advisory
https://www.suse.com/security/cve/CVE-2025-0167/ advisory
https://www.suse.com/security/cve/CVE-2025-0725/ advisory

Open in Interactive Console →