[slackware-security] curl

🗓️ 07 Jan 2026 23:08:50Reported by Slackware Linux ProjectType

New curl update fixes OpenSSL bypass, token leak, and certificate pinning issues in Slackware 15.0 and current.

Reporter	Title	Published	Views	Family All 209
FreeBSD	curl -- Multiple vulnerabilities	6 Jan 202600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Agent images	18 May 202616:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability impacts AIX due to cURL libcurl (CVE-2025-14524)	15 Apr 202622:05	–	ibm
Tenable Nessus	Amazon Linux 2023 : curl, curl-minimal, libcurl (ALAS2023-2026-1375)	19 Feb 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : curl, --advisory ALAS2-2026-3173 (ALAS-2026-3173)	19 Feb 202600:00	–	nessus
Tenable Nessus	Curl 8.8.0 < 8.18.0 Improper Certificate Validation.	19 Jan 202600:00	–	nessus
Tenable Nessus	Curl 7.33.0 < 8.18.0 OAuth2 Bearer Token Leak (CVE-2025-14524)	19 Jan 202600:00	–	nessus
Tenable Nessus	libcurl 7.87.0 < 8.18.0 OpenSSL partial chain store policy bypass (CVE-2025-14819)	19 Jan 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP13 : curl (EulerOS-SA-2026-1232)	10 Mar 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP13 : curl (EulerOS-SA-2026-1268)	10 Mar 202600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Slackware	15.0	i586	curl	8.17.0	curl-8.17.0-i586-1_slack15.0.txz
Slackware	15.0	x86_64	curl	8.17.0	curl-8.17.0-x86_64-1_slack15.0.txz
Slackware	current	i686	curl	8.18.0	curl-8.18.0-i686-1.txz
Slackware	current	x86_64	curl	8.18.0	curl-8.18.0-x86_64-1.txz

07 Jan 2026 23:08Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.15.9

EPSS0.0003

SSVC