[CLSA-2026:1791344648] Fix CVE(s): CVE-2026-8458
Type:
security
Severity:
Important
Release date:
2026-10-07 03:44:34 UTC
Description:
* SECURITY UPDATE: wrong connection reuse for different Negotiate services - debian/patches/CVE-2026-8458.patch: store the (proxy) service name on the connection and only reuse a connection when the same service names are asked for in lib/url.c, lib/urldata.h and lib/http_negotiate.c. - CVE-2026-8458
CVEs fixed:
Updated packages:
  • curl_7.64.0-4+deb10u9+tuxcare.els7_amd64.deb
    sha:95732a9dd5b6836ffa04b0c4a224aed9bd399053
  • libcurl3-gnutls_7.64.0-4+deb10u9+tuxcare.els7_amd64.deb
    sha:2955eb1318b2bf0e40053f2f61d6139c9e32bd65
  • libcurl3-nss_7.64.0-4+deb10u9+tuxcare.els7_amd64.deb
    sha:ce31b05012cd9b08023d5750d13136a3b9f9e359
  • libcurl4_7.64.0-4+deb10u9+tuxcare.els7_amd64.deb
    sha:ddc39eedc5b2119df5048d3d753c37f89f9829fa
  • libcurl4-doc_7.64.0-4+deb10u9+tuxcare.els7_all.deb
    sha:1a4654cffe89a432a149691f5c7ab951f29be228
  • libcurl4-gnutls-dev_7.64.0-4+deb10u9+tuxcare.els7_amd64.deb
    sha:07c94325e43cdc12f672c2e7f7fa7a352aca43cb
  • libcurl4-nss-dev_7.64.0-4+deb10u9+tuxcare.els7_amd64.deb
    sha:666e3201dabb2a666e8d467b29c5afd63ca56f0c
  • libcurl4-openssl-dev_7.64.0-4+deb10u9+tuxcare.els7_amd64.deb
    sha:79659650638a4e4c822da3c5d639964e4978a306
  • curl_7.64.0-4+deb10u9+tuxcare.els7_arm64.deb
    sha:5831eccc7ab505f1592f22df703c42be6bf6f9e7
  • libcurl3-gnutls_7.64.0-4+deb10u9+tuxcare.els7_arm64.deb
    sha:6124703de9a11bdaf3b2318fe660c37e8583f1c4
  • libcurl3-nss_7.64.0-4+deb10u9+tuxcare.els7_arm64.deb
    sha:630b2748b0427bdcc96e409edcc28c9bc6d31a5f
  • libcurl4_7.64.0-4+deb10u9+tuxcare.els7_arm64.deb
    sha:7e93755eff3a59207c662ad5aa637d71055f47ea
  • libcurl4-gnutls-dev_7.64.0-4+deb10u9+tuxcare.els7_arm64.deb
    sha:eef99f023976616caeb9a5b4c8e8f65c12347891
  • libcurl4-nss-dev_7.64.0-4+deb10u9+tuxcare.els7_arm64.deb
    sha:9cbbe7d6ed26748f2cba4a3cde281e0bd8b80a47
  • libcurl4-openssl-dev_7.64.0-4+deb10u9+tuxcare.els7_arm64.deb
    sha:93e11ee5d5b36f6966e5458629f32e121511f975
  • curl_7.64.0-4+deb10u9+tuxcare.els7_armel.deb
    sha:39be99f67b63f800a0a18981d4d32359ace12b60
  • libcurl3-gnutls_7.64.0-4+deb10u9+tuxcare.els7_armel.deb
    sha:efe5d8f5c2d7e8b83b5847abdab719ab391be318
  • libcurl3-nss_7.64.0-4+deb10u9+tuxcare.els7_armel.deb
    sha:6c467eabab04861a901d85168cc2c77ef02b5f49
  • libcurl4_7.64.0-4+deb10u9+tuxcare.els7_armel.deb
    sha:709896d93afa5bc24383fc0c57609d60441be2ca
  • libcurl4-gnutls-dev_7.64.0-4+deb10u9+tuxcare.els7_armel.deb
    sha:d1e8f79883aa28fdcfea47bedfd5a13d27dc934a
  • libcurl4-nss-dev_7.64.0-4+deb10u9+tuxcare.els7_armel.deb
    sha:3e2f867e7d0fb5d227ed2bb3fcd05b6e6ec0ac90
  • libcurl4-openssl-dev_7.64.0-4+deb10u9+tuxcare.els7_armel.deb
    sha:9b2b5304fbf06817c9b2e3315aeed76fd071e635
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.