[CLSA-2026:1787062885] curl: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-08-18 20:53:20 UTC
Description:
- CVE-2026-8927: fix cross-proxy Digest auth state leak with env-set proxies - CVE-2026-8932: fix incomplete mTLS config matching in connection reuse
CVEs fixed:
Updated packages:
  • curl-7.19.7-59.el6.tuxcare.els18.x86_64.rpm
    sha:db5cb8bda84d41e25d2d59117cebd7ed698a195c3942a107f54257a0860ec80f
  • libcurl-7.19.7-59.el6.tuxcare.els18.i686.rpm
    sha:43f8db3e6e6862d9003946ecf509098275a37693fff9e59c35802bff37691b14
  • libcurl-7.19.7-59.el6.tuxcare.els18.x86_64.rpm
    sha:e275407fdb9012f85b6bbf710d6cdeca812267c41778d07ee6e95cc196f3f80c
  • libcurl-devel-7.19.7-59.el6.tuxcare.els18.i686.rpm
    sha:f5486d5ee9cf5ee6881fabb4dbd359acf27cc852e4b56d0610a36831e314c372
  • libcurl-devel-7.19.7-59.el6.tuxcare.els18.x86_64.rpm
    sha:7b44245b601a8009b5d5d3c9b3f1db20767e179e19ac152920cdd4d7842cba36
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.