SUSE-CU-2025:714-1: Security update of suse/sle-micro/5.2/toolbox
sle-container-updates at lists.suse.com
sle-container-updates at lists.suse.com
Fri Feb 7 13:05:04 UTC 2025
SUSE Container Update Advisory: suse/sle-micro/5.2/toolbox
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2025:714-1
Container Tags : suse/sle-micro/5.2/toolbox:14.2 , suse/sle-micro/5.2/toolbox:14.2-7.11.75 , suse/sle-micro/5.2/toolbox:latest
Container Release : 7.11.75
Severity : moderate
Type : security
References : 1236588 1236590 CVE-2025-0167 CVE-2025-0725
-----------------------------------------------------------------
The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:372-1
Released: Wed Feb 5 16:35:47 2025
Summary: Security update for curl
Type: security
Severity: moderate
References: 1236588,1236590,CVE-2025-0167,CVE-2025-0725
This update for curl fixes the following issues:
- CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590)
- CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588)
The following package changes have been done:
- curl-7.66.0-150200.4.84.1 updated
- libcurl4-7.66.0-150200.4.84.1 updated
More information about the sle-container-updates
mailing list