CVE catalog

CVE-2025-10148

curl vulnerabilities

Severity: Medium · CVSS 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Published: Sep 9, 2025, 10:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.52% · Oct 25, 2026

curl's WebSocket code did not update the 32-bit mask pattern for each new outgoing frame as the specification says. Instead it used a fixed mask that persisted and was used throughout the entire connection. A predictable mask pattern allows for a malicious server to induce traffic between the two communicating parties that could be interpreted by an involved proxy (configured or transparent) as genuine, real, HTTP traffic with content and thereby poison its cache. That cached poisoned content could then be served to all users of that proxy.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	curl	sid	`8.23.0-1`	fixed
Debian	curl	forky	`8.22.0-1`	fixed
Debian	curl	trixie	`8.14.1-2+deb13u5`	fixed
Debian	curl	trixie-security	`8.14.1-2+deb13u7`	fixed
Debian	curl	bookworm	`7.88.1-10+deb12u15`	fixed
Debian	curl	bookworm-security	`7.88.1-10+deb12u5`	vulnerable
Ubuntu	curl	noble	`7.88.1-10+deb12u15`	fixed
Ubuntu	curl	noble	`8.5.0-2ubuntu10.7`	fixed
Ubuntu	libcurl3t64-gnutls	noble	`8.5.0-2ubuntu10.7`	fixed
Ubuntu	libcurl4-doc	noble	`8.5.0-2ubuntu10.7`	fixed
Ubuntu	libcurl4-gnutls-dev	noble	`8.5.0-2ubuntu10.7`	fixed
Ubuntu	libcurl4-openssl-dev	noble	`8.5.0-2ubuntu10.7`	fixed
Ubuntu	libcurl4t64	noble	`8.5.0-2ubuntu10.7`	fixed
Cpe	curl	Not reported	`8.16.0`	fixed
Ubuntu	curl	24.04	`8.2.1-1ubuntu3`	vulnerable
Ubuntu	curl	24.04	`8.2.1-1ubuntu3.1`	vulnerable
Ubuntu	curl	24.04	`8.4.0-2ubuntu1`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu1`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu2`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu8`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu9`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu10`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu10.1`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu10.2`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu10.3`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu10.4`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu10.5`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu10.6`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu10.7`	fixed
Ubuntu	curl	25.10	`8.12.1-3ubuntu1`	vulnerable
Ubuntu	curl	25.10	`8.13.0-5ubuntu1`	vulnerable
Ubuntu	curl	25.10	`8.14.1-1ubuntu2`	vulnerable
Ubuntu	curl	25.10	`8.14.1-1ubuntu3`	vulnerable
Ubuntu	curl	25.10	`8.14.1-2ubuntu1`	vulnerable
Ubuntu	curl	25.10	`8.14.1-2ubuntu1.1`	fixed
Alpine	curl	3.19	`8.14.1-r2`	fixed
Alpine	curl	3.20	`8.14.1-r2`	fixed
Alpine	curl	3.21	`8.14.1-r2`	fixed
Alpine	curl	3.22	`8.14.1-r2`	fixed
Alpine	curl	3.23	`8.16.0-r0`	fixed
Alpine	curl	3.24	`8.16.0-r0`	fixed
Ubuntu	curl	22.04	`7.74.0-1.3ubuntu2`	vulnerable
Ubuntu	curl	22.04	`7.74.0-1.3ubuntu3`	vulnerable
Ubuntu	curl	22.04	`7.80.0-3`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.1`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.2`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.3`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.4`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.6`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.7`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.8`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.10`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.11`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.13`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.14`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.15`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.16`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.17`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.18`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.19`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.20`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.21`	vulnerable
Ubuntu	curl	22.04	`7.81.0-1ubuntu1.22`	fixed
Ubuntu	curl	24.04	`8.2.1-1ubuntu3`	vulnerable
Ubuntu	curl	24.04	`8.2.1-1ubuntu3.1`	vulnerable
Ubuntu	curl	24.04	`8.4.0-2ubuntu1`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu1`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu2`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu8`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu9`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu10`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu10.1`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu10.2`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu10.3`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu10.4`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu10.5`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu10.6`	vulnerable
Ubuntu	curl	24.04	`8.5.0-2ubuntu10.7`	fixed
Ubuntu	curl	25.10	`8.12.1-3ubuntu1`	vulnerable
Ubuntu	curl	25.10	`8.13.0-5ubuntu1`	vulnerable
Ubuntu	curl	25.10	`8.14.1-1ubuntu2`	vulnerable
Ubuntu	curl	25.10	`8.14.1-1ubuntu3`	vulnerable
Ubuntu	curl	25.10	`8.14.1-2ubuntu1`	vulnerable
Ubuntu	curl	25.10	`8.14.1-2ubuntu1.1`	fixed
Opensuse	curl	leap 16.0	`8.14.1-160000.3.1`	fixed
Opensuse	curl	tumbleweed	`8.16.0-1.1`	fixed
Suse	curl	linux enterprise server 16.0	`8.14.1-160000.3.1`	fixed
Suse	curl-mini	linux enterprise server 16.0	`8.14.1-160000.3.1`	fixed
Suse	curl	linux enterprise server for sap applications 16.0	`8.14.1-160000.3.1`	fixed
Suse	curl-mini	linux enterprise server for sap applications 16.0	`8.14.1-160000.3.1`	fixed
Suse	curl	linux micro 6.2	`8.14.1-160000.3.1`	fixed
Suse	curl	linux micro 6.1	`8.14.1-slfo.1.1_2.1`	fixed
Suse	curl	linux enterprise server 12 sp5-ltss	`8.0.1-11.108.1`	fixed
Suse	curl	linux enterprise server ltss extended security 12 sp5	`8.0.1-11.108.1`	fixed
Suse	curl	linux micro 6.0	`8.14.1-1.1`	fixed
Suse	curl	linux enterprise installer updates 15 sp4	`8.14.1-150400.5.69.1`	fixed
Suse	curl	linux enterprise installer updates 15 sp5	`8.14.1-150400.5.69.1`	fixed
Suse	curl	linux enterprise micro 5.3	`8.14.1-150400.5.69.1`	fixed
Suse	curl	linux enterprise micro 5.4	`8.14.1-150400.5.69.1`	fixed
Suse	curl	linux enterprise micro 5.5	`8.14.1-150400.5.69.1`	fixed
Suse	curl	linux enterprise high performance computing 15 sp4-espos	`8.14.1-150400.5.69.1`	fixed
Suse	curl	linux enterprise high performance computing 15 sp4-ltss	`8.14.1-150400.5.69.1`	fixed
Suse	curl	linux enterprise high performance computing 15 sp5-espos	`8.14.1-150400.5.69.1`	fixed
Suse	curl	linux enterprise high performance computing 15 sp5-ltss	`8.14.1-150400.5.69.1`	fixed
Suse	curl	linux enterprise server 15 sp4-ltss	`8.14.1-150400.5.69.1`	fixed
Suse	curl	linux enterprise server 15 sp5-ltss	`8.14.1-150400.5.69.1`	fixed
Suse	curl	linux enterprise server for sap applications 15 sp4	`8.14.1-150400.5.69.1`	fixed
Suse	curl	manager proxy lts 4.3	`8.14.1-150400.5.69.1`	fixed
Suse	curl	manager server lts 4.3	`8.14.1-150400.5.69.1`	fixed
Suse	brotli	linux enterprise micro 5.3	`1.0.7-150200.3.5.1`	fixed
Suse	brotli	linux enterprise micro 5.4	`1.0.7-150200.3.5.1`	fixed
Suse	brotli	linux enterprise micro 5.5	`1.0.7-150200.3.5.1`	fixed
Suse	brotli	linux enterprise module for basesystem 15 sp6	`1.0.7-150200.3.5.1`	fixed
Suse	brotli	linux enterprise module for basesystem 15 sp7	`1.0.7-150200.3.5.1`	fixed
Suse	brotli	linux enterprise high performance computing 15 sp3-ltss	`1.0.7-150200.3.5.1`	fixed
Suse	curl	linux enterprise high performance computing 15 sp3-ltss	`8.14.1-150200.4.91.1`	fixed
Suse	brotli	linux enterprise high performance computing 15 sp4-espos	`1.0.7-150200.3.5.1`	fixed
Suse	brotli	linux enterprise high performance computing 15 sp4-ltss	`1.0.7-150200.3.5.1`	fixed
Suse	brotli	linux enterprise high performance computing 15 sp5-espos	`1.0.7-150200.3.5.1`	fixed
Suse	brotli	linux enterprise high performance computing 15 sp5-ltss	`1.0.7-150200.3.5.1`	fixed
Suse	brotli	linux enterprise server 15 sp3-ltss	`1.0.7-150200.3.5.1`	fixed
Suse	curl	linux enterprise server 15 sp3-ltss	`8.14.1-150200.4.91.1`	fixed
Suse	brotli	linux enterprise server 15 sp4-ltss	`1.0.7-150200.3.5.1`	fixed
Suse	brotli	linux enterprise server 15 sp5-ltss	`1.0.7-150200.3.5.1`	fixed
Suse	brotli	linux enterprise server for sap applications 15 sp3	`1.0.7-150200.3.5.1`	fixed
Suse	curl	linux enterprise server for sap applications 15 sp3	`8.14.1-150200.4.91.1`	fixed
Suse	brotli	linux enterprise server for sap applications 15 sp4	`1.0.7-150200.3.5.1`	fixed
Suse	brotli	linux enterprise server for sap applications 15 sp5	`1.0.7-150200.3.5.1`	fixed
Suse	brotli	manager proxy lts 4.3	`1.0.7-150200.3.5.1`	fixed
Suse	brotli	manager server lts 4.3	`1.0.7-150200.3.5.1`	fixed
Suse	brotli	linux enterprise micro 5.1	`1.0.7-150200.3.5.1`	fixed
Suse	curl	linux enterprise micro 5.1	`8.14.1-150200.4.91.1`	fixed
Suse	brotli	linux enterprise micro 5.2	`1.0.7-150200.3.5.1`	fixed
Suse	curl	linux enterprise micro 5.2	`8.14.1-150200.4.91.1`	fixed
Suse	brotli	enterprise storage 7.1	`1.0.7-150200.3.5.1`	fixed
Suse	curl	enterprise storage 7.1	`8.14.1-150200.4.91.1`	fixed
Opensuse	brotli	leap 15.6	`1.0.7-150200.3.5.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	curl	source	sid	`8.16.0-1`	not yet assigned	Not reported	Not reported
Debian	curl	source	forky	`8.16.0-1`	not yet assigned	Not reported	Not reported
Debian	curl	source	trixie	`8.14.1-2+deb13u1`	not yet assigned	Not reported	Not reported
Debian	curl	source	bookworm	`7.88.1-10+deb12u15`	not yet assigned	Not reported	Not reported
Ubuntu	curl	deb	noble	`7.88.1-10+deb12u15`	Not reported	Not reported	Not reported
Ubuntu	curl	deb	noble	`8.5.0-2ubuntu10.7`	Not reported	Not reported	Not reported
Ubuntu	libcurl3t64-gnutls	deb	noble	`8.5.0-2ubuntu10.7`	Not reported	Not reported	Not reported
Ubuntu	libcurl4-doc	deb	noble	`8.5.0-2ubuntu10.7`	Not reported	Not reported	Not reported
Ubuntu	libcurl4-gnutls-dev	deb	noble	`8.5.0-2ubuntu10.7`	Not reported	Not reported	Not reported
Ubuntu	libcurl4-openssl-dev	deb	noble	`8.5.0-2ubuntu10.7`	Not reported	Not reported	Not reported
Ubuntu	libcurl4t64	deb	noble	`8.5.0-2ubuntu10.7`	Not reported	Not reported	Not reported
Cpe	curl	cpe	Not reported	`8.16.0`	Not reported	NVD-CVE-2025-10148	Not reported
Ubuntu	curl	deb	24.04	`8.5.0-2ubuntu10.7`	Not reported	UBUNTU-CVE-2025-10148	Not reported
Ubuntu	curl	deb	25.10	`8.14.1-2ubuntu1.1`	Not reported	UBUNTU-CVE-2025-10148	Not reported
Alpine	curl	apk	3.19	`8.14.1-r2`	Not reported	ALPINE-CVE-2025-10148	Not reported
Alpine	curl	apk	3.20	`8.14.1-r2`	Not reported	ALPINE-CVE-2025-10148	Not reported
Alpine	curl	apk	3.21	`8.14.1-r2`	Not reported	ALPINE-CVE-2025-10148	Not reported
Alpine	curl	apk	3.22	`8.14.1-r2`	Not reported	ALPINE-CVE-2025-10148	Not reported
Alpine	curl	apk	3.23	`8.16.0-r0`	Not reported	ALPINE-CVE-2025-10148	Not reported
Alpine	curl	apk	3.24	`8.16.0-r0`	Not reported	ALPINE-CVE-2025-10148	Not reported
Ubuntu	curl	deb	22.04	`7.81.0-1ubuntu1.22`	Not reported	USN-8062-1	Not reported
Ubuntu	curl	deb	24.04	`8.5.0-2ubuntu10.7`	Not reported	USN-8062-1	Not reported
Ubuntu	curl	deb	25.10	`8.14.1-2ubuntu1.1`	Not reported	USN-8062-1	Not reported
Opensuse	curl	rpm	leap 16.0	`8.14.1-160000.3.1`	Not reported	OPENSUSE-SU-2025:20090-1	Not reported
Opensuse	curl	rpm	tumbleweed	`8.16.0-1.1`	Not reported	OPENSUSE-SU-2025:15590-1	Not reported
Suse	curl	rpm	linux enterprise server 16.0	`8.14.1-160000.3.1`	Not reported	SUSE-SU-2025:21145-1	Not reported
Suse	curl-mini	rpm	linux enterprise server 16.0	`8.14.1-160000.3.1`	Not reported	SUSE-SU-2025:21145-1	Not reported
Suse	curl	rpm	linux enterprise server for sap applications 16.0	`8.14.1-160000.3.1`	Not reported	SUSE-SU-2025:21145-1	Not reported
Suse	curl-mini	rpm	linux enterprise server for sap applications 16.0	`8.14.1-160000.3.1`	Not reported	SUSE-SU-2025:21145-1	Not reported
Suse	curl	rpm	linux micro 6.2	`8.14.1-160000.3.1`	Not reported	SUSE-SU-2025:21077-1	Not reported
Suse	curl	rpm	linux micro 6.1	`8.14.1-slfo.1.1_2.1`	Not reported	SUSE-SU-2025:20802-1	Not reported
Suse	curl	rpm	linux enterprise server 12 sp5-ltss	`8.0.1-11.108.1`	Not reported	SUSE-SU-2025:03173-1	Not reported
Suse	curl	rpm	linux enterprise server ltss extended security 12 sp5	`8.0.1-11.108.1`	Not reported	SUSE-SU-2025:03173-1	Not reported
Suse	curl	rpm	linux micro 6.0	`8.14.1-1.1`	Not reported	SUSE-SU-2025:20824-1	Not reported
Suse	curl	rpm	linux enterprise installer updates 15 sp4	`8.14.1-150400.5.69.1`	Not reported	SUSE-SU-2025:03267-1	Not reported
Suse	curl	rpm	linux enterprise installer updates 15 sp5	`8.14.1-150400.5.69.1`	Not reported	SUSE-SU-2025:03267-1	Not reported
Suse	curl	rpm	linux enterprise micro 5.3	`8.14.1-150400.5.69.1`	Not reported	SUSE-SU-2025:03267-1	Not reported
Suse	curl	rpm	linux enterprise micro 5.4	`8.14.1-150400.5.69.1`	Not reported	SUSE-SU-2025:03267-1	Not reported
Suse	curl	rpm	linux enterprise micro 5.5	`8.14.1-150400.5.69.1`	Not reported	SUSE-SU-2025:03267-1	Not reported
Suse	curl	rpm	linux enterprise high performance computing 15 sp4-espos	`8.14.1-150400.5.69.1`	Not reported	SUSE-SU-2025:03267-1	Not reported
Suse	curl	rpm	linux enterprise high performance computing 15 sp4-ltss	`8.14.1-150400.5.69.1`	Not reported	SUSE-SU-2025:03267-1	Not reported
Suse	curl	rpm	linux enterprise high performance computing 15 sp5-espos	`8.14.1-150400.5.69.1`	Not reported	SUSE-SU-2025:03267-1	Not reported
Suse	curl	rpm	linux enterprise high performance computing 15 sp5-ltss	`8.14.1-150400.5.69.1`	Not reported	SUSE-SU-2025:03267-1	Not reported
Suse	curl	rpm	linux enterprise server 15 sp4-ltss	`8.14.1-150400.5.69.1`	Not reported	SUSE-SU-2025:03267-1	Not reported
Suse	curl	rpm	linux enterprise server 15 sp5-ltss	`8.14.1-150400.5.69.1`	Not reported	SUSE-SU-2025:03267-1	Not reported
Suse	curl	rpm	linux enterprise server for sap applications 15 sp4	`8.14.1-150400.5.69.1`	Not reported	SUSE-SU-2025:03267-1	Not reported
Suse	curl	rpm	manager proxy lts 4.3	`8.14.1-150400.5.69.1`	Not reported	SUSE-SU-2025:03267-1	Not reported
Suse	curl	rpm	manager server lts 4.3	`8.14.1-150400.5.69.1`	Not reported	SUSE-SU-2025:03267-1	Not reported
Suse	brotli	rpm	linux enterprise micro 5.3	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	linux enterprise micro 5.4	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	linux enterprise micro 5.5	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	linux enterprise module for basesystem 15 sp6	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	linux enterprise module for basesystem 15 sp7	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	linux enterprise high performance computing 15 sp3-ltss	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	curl	rpm	linux enterprise high performance computing 15 sp3-ltss	`8.14.1-150200.4.91.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	linux enterprise high performance computing 15 sp4-espos	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	linux enterprise high performance computing 15 sp4-ltss	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	linux enterprise high performance computing 15 sp5-espos	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	linux enterprise high performance computing 15 sp5-ltss	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	linux enterprise server 15 sp3-ltss	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	curl	rpm	linux enterprise server 15 sp3-ltss	`8.14.1-150200.4.91.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	linux enterprise server 15 sp4-ltss	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	linux enterprise server 15 sp5-ltss	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	linux enterprise server for sap applications 15 sp3	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	curl	rpm	linux enterprise server for sap applications 15 sp3	`8.14.1-150200.4.91.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	linux enterprise server for sap applications 15 sp4	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	linux enterprise server for sap applications 15 sp5	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	manager proxy lts 4.3	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	manager server lts 4.3	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	linux enterprise micro 5.1	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	curl	rpm	linux enterprise micro 5.1	`8.14.1-150200.4.91.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	linux enterprise micro 5.2	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	curl	rpm	linux enterprise micro 5.2	`8.14.1-150200.4.91.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	brotli	rpm	enterprise storage 7.1	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Suse	curl	rpm	enterprise storage 7.1	`8.14.1-150200.4.91.1`	Not reported	SUSE-SU-2025:03268-1	Not reported
Opensuse	brotli	rpm	leap 15.6	`1.0.7-150200.3.5.1`	Not reported	SUSE-SU-2025:03268-1	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[curl]Affected
Details (6)
- 7.88.1-10+deb12u15 · amd64 · bookworm
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u15 · arm64 · bookworm
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · amd64 · bookworm-backports
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · arm64 · bookworm-backports
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u5 · amd64 · bookworm-security
  Affected · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u5 · arm64 · bookworm-security
  Affected · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
[libcurl3-gnutls]Affected
Source package: [curl]
Details (6)
- 7.88.1-10+deb12u15 · amd64 · bookworm
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u15 · arm64 · bookworm
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · amd64 · bookworm-backports
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · arm64 · bookworm-backports
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u5 · amd64 · bookworm-security
  Affected · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u5 · arm64 · bookworm-security
  Affected · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
[libcurl3-nss]Affected
Source package: [curl]
Details (4)
- 7.88.1-10+deb12u15 · amd64 · bookworm
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u15 · arm64 · bookworm
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u5 · amd64 · bookworm-security
  Affected · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u5 · arm64 · bookworm-security
  Affected · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
[libcurl4]Affected
Source package: [curl]
Details (6)
- 7.88.1-10+deb12u15 · amd64 · bookworm
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u15 · arm64 · bookworm
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · amd64 · bookworm-backports
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · arm64 · bookworm-backports
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u5 · amd64 · bookworm-security
  Affected · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u5 · arm64 · bookworm-security
  Affected · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
[libcurl4-doc]Affected
Source package: [curl]
Details (6)
- 7.88.1-10+deb12u15 · all · bookworm
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u15 · all · bookworm
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · all · bookworm-backports
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · all · bookworm-backports
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u5 · all · bookworm-security
  Affected · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u5 · all · bookworm-security
  Affected · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
[libcurl4-gnutls-dev]Affected
Source package: [curl]
Details (6)
- 7.88.1-10+deb12u15 · amd64 · bookworm
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u15 · arm64 · bookworm
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · amd64 · bookworm-backports
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · arm64 · bookworm-backports
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u5 · amd64 · bookworm-security
  Affected · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u5 · arm64 · bookworm-security
  Affected · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
[libcurl4-nss-dev]Affected
Source package: [curl]
Details (4)
- 7.88.1-10+deb12u15 · amd64 · bookworm
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u15 · arm64 · bookworm
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u5 · amd64 · bookworm-security
  Affected · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u5 · arm64 · bookworm-security
  Affected · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
[libcurl4-openssl-dev]Affected
Source package: [curl]
Details (6)
- 7.88.1-10+deb12u15 · amd64 · bookworm
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u15 · arm64 · bookworm
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · amd64 · bookworm-backports
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · arm64 · bookworm-backports
  Fixed · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u5 · amd64 · bookworm-security
  Affected · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12
- 7.88.1-10+deb12u5 · arm64 · bookworm-security
  Affected · Fixed: 7.88.1-10+deb12u15
  usn · curl · debian · bookworm; usn · curl · debian · 12

[openSUSE Tumbleweed]

[curl-fish-completion]Unknown
Source package: [curl]
Details (1)
- 8.21.0-1.2 · noarch · tumbleweed
  Unknown · Fixed: 8.16.0-1.1
  Version impact unknown
  usn · curl · opensuse · tumbleweed
[curl-zsh-completion]Unknown
Source package: [curl]
Details (1)
- 8.21.0-1.2 · noarch · tumbleweed
  Unknown · Fixed: 8.16.0-1.1
  Version impact unknown
  usn · curl · opensuse · tumbleweed
[libcurl4]Unknown
Source package: [curl]
Details (1)
- 8.21.0-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 8.16.0-1.1
  Version impact unknown
  usn · curl · opensuse · tumbleweed
[libcurl4-32bit]Unknown
Source package: [curl]
Details (1)
- 8.21.0-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 8.16.0-1.1
  Version impact unknown
  usn · curl · opensuse · tumbleweed
[libcurl-devel]Unknown
Source package: [curl]
Details (1)
- 8.21.0-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 8.16.0-1.1
  Version impact unknown
  usn · curl · opensuse · tumbleweed
[libcurl-devel-32bit]Unknown
Source package: [curl]
Details (1)
- 8.21.0-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 8.16.0-1.1
  Version impact unknown
  usn · curl · opensuse · tumbleweed
[libcurl-devel-doc]Unknown
Source package: [curl]
Details (1)
- 8.21.0-1.2 · noarch · tumbleweed
  Unknown · Fixed: 8.16.0-1.1
  Version impact unknown
  usn · curl · opensuse · tumbleweed
[wcurl]Unknown
Source package: [curl]
Details (1)
- 8.21.0-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 8.16.0-1.1
  Version impact unknown
  usn · curl · opensuse · tumbleweed

[Debian 13 (Trixie)]

[curl]Fixed
Details (5)
- 8.14.1-2+deb13u4 · amd64 · trixie
  Fixed · Fixed: 8.14.1-2+deb13u1
  usn · curl · debian · 13
- 8.14.1-2+deb13u4 · arm64 · trixie
  Fixed · Fixed: 8.14.1-2+deb13u1
  usn · curl · debian · 13
- 8.21.0-2~bpo13+1 · amd64 · trixie-backports
  Fixed · Fixed: 8.14.1-2+deb13u1
  usn · curl · debian · 13
- 8.21.0-2~bpo13+1 · arm64 · trixie-backports
  Fixed · Fixed: 8.14.1-2+deb13u1
  usn · curl · debian · 13
- 8.14.1-2+deb13u7 · amd64 · trixie-security
  Fixed · Fixed: 8.14.1-2+deb13u1
  usn · curl · debian · 13
[libcurl3t64-gnutls]Fixed
Source package: [curl]
Details (5)
- 8.14.1-2+deb13u4 · amd64 · trixie
  Fixed · Fixed: 8.14.1-2+deb13u1
  usn · curl · debian · 13
- 8.14.1-2+deb13u4 · arm64 · trixie
  Fixed · Fixed: 8.14.1-2+deb13u1
  usn · curl · debian · 13
- 8.21.0-2~bpo13+1 · amd64 · trixie-backports
  Fixed · Fixed: 8.14.1-2+deb13u1
  usn · curl · debian · 13
- 8.21.0-2~bpo13+1 · arm64 · trixie-backports
  Fixed · Fixed: 8.14.1-2+deb13u1
  usn · curl · debian · 13
- 8.14.1-2+deb13u7 · amd64 · trixie-security
  Fixed · Fixed: 8.14.1-2+deb13u1
  usn · curl · debian · 13
[libcurl4-doc]Fixed
Source package: [curl]
Details (5)
- 8.14.1-2+deb13u4 · all · trixie
  Fixed · Fixed: 8.14.1-2+deb13u1
  usn · curl · debian · 13
- 8.14.1-2+deb13u4 · all · trixie
  Fixed · Fixed: 8.14.1-2+deb13u1
  usn · curl · debian · 13
- 8.21.0-2~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 8.14.1-2+deb13u1
  usn · curl · debian · 13
- 8.21.0-2~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 8.14.1-2+deb13u1
  usn · curl · debian · 13
- 8.14.1-2+deb13u7 · all · trixie-security
  Fixed · Fixed: 8.14.1-2+deb13u1
  usn · curl · debian · 13
[libcurl4-gnutls]Fixed
Source package: [curl]
Details (2)
- 8.21.0-2~bpo13+1 · amd64 · trixie-backports
  Fixed · Fixed: 8.14.1-2+deb13u1
  usn · curl · debian · 13
- 8.21.0-2~bpo13+1 · arm64 · trixie-backports
  Fixed · Fixed: 8.14.1-2+deb13u1
  usn · curl · debian · 13

Next results

Observed: Oct 27, 2026, 11:51:38 AM UTC

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]