[CLSA-2026:1785502239] curl: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-31 12:50:51 UTC
Description:
- CVE-2026-8286: require a matching SSL configuration before reusing a pooled connection for a clear-text transfer that upgrades via STARTTLS
CVEs fixed:
Updated packages:
  • curl-7.76.1-31.el9_6.1.tuxcare.els15.x86_64.rpm
    sha:dcd7f63bcd21cdc37f9ab19e3934ea8a3b699b01c8941fda80ed4176c9096c23
  • curl-minimal-7.76.1-31.el9_6.1.tuxcare.els15.x86_64.rpm
    sha:a0ed54221b0e088b03baa95d1a33f263584f7b34fc2cab1c555e04ef3e6e93ae
  • libcurl-7.76.1-31.el9_6.1.tuxcare.els15.i686.rpm
    sha:115a5b277f74a1f4f8a515a42fa8c01d978888eb86ed983a3e8c8780331533e9
  • libcurl-7.76.1-31.el9_6.1.tuxcare.els15.x86_64.rpm
    sha:6bd8c97098f0d6c7005b4964389f5aa7d680c617a8d3889d7d2055f840775dda
  • libcurl-devel-7.76.1-31.el9_6.1.tuxcare.els15.i686.rpm
    sha:b6b100c5c4e68f59832f6904f4be9e81f081b9f0e2fca2486f13821685324cd0
  • libcurl-devel-7.76.1-31.el9_6.1.tuxcare.els15.x86_64.rpm
    sha:0cac2cb06d67d5878d8a616627af220bcedbca31fb63b614ff6909cf0b483a4e
  • libcurl-minimal-7.76.1-31.el9_6.1.tuxcare.els15.i686.rpm
    sha:96489bee1c0d51e66d6e004b07a766b5eaea39ea039a48ec1d0e26f4cdfe1ba5
  • libcurl-minimal-7.76.1-31.el9_6.1.tuxcare.els15.x86_64.rpm
    sha:f01479b15a64fac23a44eb26fcb54364fe27cbc246cafa629de4e94d9c75f896
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.