[CLSA-2026:1793058300] curl: Fix of 8 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-10-26 23:45:18 UTC
Description:
- CVE-2026-80230: certificate pinning ignored when the server sends no certificate - CVE-2026-82209: cookie set for an exact public suffix domain sent to its subdomains - CVE-2026-11856: Digest auth state kept when only the port changes - CVE-2025-0167: netrc 'default' entry without credentials matched any host - CVE-2026-3784: proxy connection reuse ignored differing proxy credentials - CVE-2024-11053: netrc credentials leaked to another host on redirect - CVE-2026-8926: netrc password of another login sent with the user given in the URL - CVE-2026-6253: proxy credentials kept when a redirect switches proxy - CVE-2026-6429: netrc or URL credentials replayed to the redirect target
CVEs fixed:
Updated packages:
  • curl-7.76.1-40.el9_8.8.tuxcare.els4.aarch64.rpm
    sha:9c5a364ba357039ede5163e1acfbcb38a13a97b3fcc1feb5436d460a46b3982c
  • curl-7.76.1-40.el9_8.8.tuxcare.els4.i686.rpm
    sha:1895952dd8c88e46a59262e017d176cdb462c1faf3fb37464fb43f44467e9cfd
  • curl-7.76.1-40.el9_8.8.tuxcare.els4.x86_64.rpm
    sha:e3a0eb0a2f9d8e0819ff084c45e1fd1f2eb712d0c0a146db77e9595f084b92d6
  • curl-minimal-7.76.1-40.el9_8.8.tuxcare.els4.aarch64.rpm
    sha:6c149117b037e15f0c9b4a7e3e2aa8c9e4249950ce99cb764965f782446e2d9f
  • curl-minimal-7.76.1-40.el9_8.8.tuxcare.els4.i686.rpm
    sha:6e75bba64bb38094f07186afeb901d9d69d44986ac565eddcee7e2420fd685f9
  • curl-minimal-7.76.1-40.el9_8.8.tuxcare.els4.x86_64.rpm
    sha:7295c98f95fece5b53cbb5c3e9a58d00866d56da8fe3471e2dfc1a47e80868bd
  • libcurl-7.76.1-40.el9_8.8.tuxcare.els4.aarch64.rpm
    sha:458ef15f96e7f790b0a4cbef93d6365e453ad73c72b9e22c00fedf86705e8e2b
  • libcurl-7.76.1-40.el9_8.8.tuxcare.els4.i686.rpm
    sha:d2fb71e83a3bb722e29cb95feea45f0305a994caf6ec55585aea912dd7c31ca2
  • libcurl-7.76.1-40.el9_8.8.tuxcare.els4.x86_64.rpm
    sha:20cde9f7e97a76e3a0a1b6fb92b83bc7f104f3c413b2a11be7552e5fb59a2614
  • libcurl-devel-7.76.1-40.el9_8.8.tuxcare.els4.aarch64.rpm
    sha:2963e263562630ca2b7b3d3052c0faac91464f8c752913ebe538605c4baa0f11
  • libcurl-devel-7.76.1-40.el9_8.8.tuxcare.els4.i686.rpm
    sha:a742650b3a3c819389790f3378814f258ac27bdfa572e39ed7ee25d1397deecf
  • libcurl-devel-7.76.1-40.el9_8.8.tuxcare.els4.x86_64.rpm
    sha:5568ee70e8caeac8c395d62e9a55b43cd74a8fab151aec6502df9cfd2f3cdfca
  • libcurl-minimal-7.76.1-40.el9_8.8.tuxcare.els4.aarch64.rpm
    sha:4d1509ef6db1a158d54d7997735e90fab6e964c142e1ac5d4624903bd9459ce6
  • libcurl-minimal-7.76.1-40.el9_8.8.tuxcare.els4.i686.rpm
    sha:0b7fd878379346a83168811ebeb6a1d966db0ff1d999b6a91743d65dca6e6e6d
  • libcurl-minimal-7.76.1-40.el9_8.8.tuxcare.els4.x86_64.rpm
    sha:e0bba1930b3fe4aac51bc5a1682dd0a0947a1aaf0aa7313d9f95ddb06133481b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.