[CLSA-2026:1792808992] curl: Fix of CVE-2026-6276
Type:
security
Severity:
Important
Release date:
2026-10-24 02:30:03 UTC
Description:
- CVE-2026-6276: clear the custom Host cookie host per request so cookies are not sent to another origin on connection reuse
CVEs fixed:
Updated packages:
  • curl-7.19.7-59.el6.tuxcare.els19.i686.rpm
    sha:388049e53bd69522c993549154e63130e32b4a57695552e191df5c838b9ab293
  • curl-7.19.7-59.el6.tuxcare.els19.x86_64.rpm
    sha:6279bbeaf8fa3efc4d64795eccfb27b61f9f0e7c444fc67d0e8e7886e6646f70
  • libcurl-7.19.7-59.el6.tuxcare.els19.i686.rpm
    sha:c33a291e007bd7bab58cca4596968e8354338eb90342d07b8f56550c69f5f7d0
  • libcurl-7.19.7-59.el6.tuxcare.els19.x86_64.rpm
    sha:39363e5ed7a5d99c8352b14b5595ad4aa16fb647b334cb65ab4512f9a1582aea
  • libcurl-devel-7.19.7-59.el6.tuxcare.els19.i686.rpm
    sha:701fdd6d2da73230b0a6bcf0f4885e06d093680d9e3098bba325da85e9fcfa2a
  • libcurl-devel-7.19.7-59.el6.tuxcare.els19.x86_64.rpm
    sha:67c70ea8e826ce6500f12616aa76e9325d96fbd683817933db8df3c6c7e7e005
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.