[CLSA-2026:1785499004] curl: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-08-04 22:50:02 UTC
Description:
- CVE-2026-8286: require a matching SSL configuration before reusing a pooled connection for a clear-text transfer that upgrades via STARTTLS
CVEs fixed:
Updated packages:
  • curl-7.76.1-31.el9_2.1.tuxcare.els15.x86_64.rpm
    sha:a7011a99c8dc2da9cb8ea690d6d2a84a87db54740cfff2ee523c78bdc8e37b79
  • curl-minimal-7.76.1-31.el9_2.1.tuxcare.els15.x86_64.rpm
    sha:b48a37794dad7824eac0693125880e21be23c00160b693cfb447614044829898
  • libcurl-7.76.1-31.el9_2.1.tuxcare.els15.i686.rpm
    sha:b0b73fe635664b89d4eeaf179afdca8bfc9f132bbae7bc9d9f948c18c933977d
  • libcurl-7.76.1-31.el9_2.1.tuxcare.els15.x86_64.rpm
    sha:7fbe9ca6e28b082aac7610e15217ed9ea4a2764c721396dbd82be48529ad5e6e
  • libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els15.i686.rpm
    sha:7677fc0f2c362a70f792c0e37540770d0be5bb16b07ea6d7be67439ea44ec19a
  • libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els15.x86_64.rpm
    sha:da7d13381e8d8f911ef73da840e6c57d66e58dafc78e0e2cd4f9fcddca9c6e53
  • libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els15.i686.rpm
    sha:6664b38b21c94c5ac5a922df90b164ac67529dff34c28eb71780846c06839433
  • libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els15.x86_64.rpm
    sha:bc1e760cbda93fd477c014e59b37e9f25669e49faf7a5d082a0c936fd0ff01da
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.