[CLSA-2026:1785320042] curl: Fix of CVE-2026-8286
Type:
security
Severity:
Important
Release date:
2026-07-29 10:14:13 UTC
Description:
- CVE-2026-8286: require a matching SSL configuration before reusing a pooled connection for a clear-text transfer that upgrades via STARTTLS
CVEs fixed:
Updated packages:
  • curl-7.61.1-22.el8.tuxcare.els21.x86_64.rpm
    sha:faf0e9789427460efc92b294dae52025635a001d8ea16654737ff33e3c38c0d8
  • curl-minimal-7.61.1-22.el8.tuxcare.els21.x86_64.rpm
    sha:abf8c3ebce6826978f68b097cf9a23706dfa8c617a2d686f3f6879ad46081a00
  • libcurl-7.61.1-22.el8.tuxcare.els21.i686.rpm
    sha:362569352d859cd976a5fc2ba85014fe8963c0d41850c78ea6e60ca2924610f3
  • libcurl-7.61.1-22.el8.tuxcare.els21.x86_64.rpm
    sha:09d90080627229822bfabd01894cc837890bb962265c858987a9321d1f477c68
  • libcurl-devel-7.61.1-22.el8.tuxcare.els21.i686.rpm
    sha:3e099d66720c331252e6b8b3443b59d565a6584c29252a24c373429be45d9d5c
  • libcurl-devel-7.61.1-22.el8.tuxcare.els21.x86_64.rpm
    sha:3085e6acbb1b3f982f64f0b0ffd7a1781a275a13714a689fafb37cc1a0503ca5
  • libcurl-minimal-7.61.1-22.el8.tuxcare.els21.i686.rpm
    sha:dc9c579f124cfbd617ee82ecd980b18906b035908b52c74ff24e725614831845
  • libcurl-minimal-7.61.1-22.el8.tuxcare.els21.x86_64.rpm
    sha:93bf3b6b2d2c9e491a84ee4961ce9835f508c3898e404cfbf62aca2c9b23b2ac
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.