Release date:
2026-10-07 19:02:00 UTC
Description:
* SECURITY UPDATE: use-after-free via HTTP/2 pushed transfer not
inheriting the parent share
- debian/patches/CVE-2026-18924.patch: make a server-pushed transfer
inherit the share of the easy handle it was cloned from in lib/http2.c,
so it uses the same connection pool as its parent
- CVE-2026-18924
Updated packages:
-
curl_7.74.0-1.3+deb11u16+tuxcare.els2_amd64.deb
sha:53228db525b94218cd41bebdd642ef86068c1d22
-
libcurl3-gnutls_7.74.0-1.3+deb11u16+tuxcare.els2_amd64.deb
sha:079ca5218034e454af279015cf2db69d13afe2d3
-
libcurl3-nss_7.74.0-1.3+deb11u16+tuxcare.els2_amd64.deb
sha:8e85724617ccda2b635beca3767452803d75e224
-
libcurl4_7.74.0-1.3+deb11u16+tuxcare.els2_amd64.deb
sha:e4ccac634528fca88e21cf0fa9494794bb1dac70
-
libcurl4-doc_7.74.0-1.3+deb11u16+tuxcare.els2_all.deb
sha:ce8ae61b43458aedd665f91482502fa6bf203a7b
-
libcurl4-gnutls-dev_7.74.0-1.3+deb11u16+tuxcare.els2_amd64.deb
sha:5da38bc4e0eff722201139af7432b97e951ab988
-
libcurl4-nss-dev_7.74.0-1.3+deb11u16+tuxcare.els2_amd64.deb
sha:dd0a9040d2931a30ee37a9c1b744e5614fb05651
-
libcurl4-openssl-dev_7.74.0-1.3+deb11u16+tuxcare.els2_amd64.deb
sha:c21caf1a250e1f86722b894e5b44f3beb33b4bd1
-
curl_7.74.0-1.3+deb11u16+tuxcare.els2_arm64.deb
sha:96b180beae850c7e6e9c0d5cfccf394672fd7708
-
libcurl3-gnutls_7.74.0-1.3+deb11u16+tuxcare.els2_arm64.deb
sha:78d71e6c5a8f8dd65e0d89f8b434d89cc68c388c
-
libcurl3-nss_7.74.0-1.3+deb11u16+tuxcare.els2_arm64.deb
sha:473dbe34333b931dce33103434d0756258edd326
-
libcurl4_7.74.0-1.3+deb11u16+tuxcare.els2_arm64.deb
sha:303444d0af0daecf5ee53c2974a4beb41c0e39a9
-
libcurl4-gnutls-dev_7.74.0-1.3+deb11u16+tuxcare.els2_arm64.deb
sha:ae5e9d4197bb9a2ef6e51693273aee2d72dcfd0c
-
libcurl4-nss-dev_7.74.0-1.3+deb11u16+tuxcare.els2_arm64.deb
sha:b3071eba1f61eb47447b22075054ef636dccdeb0
-
libcurl4-openssl-dev_7.74.0-1.3+deb11u16+tuxcare.els2_arm64.deb
sha:73708de515384a9ad8ac21dc3a4a0db5452e9ddf
-
curl_7.74.0-1.3+deb11u16+tuxcare.els2_armel.deb
sha:4d6522f197ac338707ef7fcfc7273aa4fd4724bc
-
libcurl3-gnutls_7.74.0-1.3+deb11u16+tuxcare.els2_armel.deb
sha:b55412d8d50e43e5d3ddec38afa4c6e418d71b46
-
libcurl3-nss_7.74.0-1.3+deb11u16+tuxcare.els2_armel.deb
sha:fe909cd60add6c04cb98934efda7311bb309c257
-
libcurl4_7.74.0-1.3+deb11u16+tuxcare.els2_armel.deb
sha:2158f129a1d4c45d446a371e1d298b6c4f38d60d
-
libcurl4-gnutls-dev_7.74.0-1.3+deb11u16+tuxcare.els2_armel.deb
sha:9f427893c62c83389faced4be44a024ab358a3ed
-
libcurl4-nss-dev_7.74.0-1.3+deb11u16+tuxcare.els2_armel.deb
sha:4bbcd660c6cdf8d69baa6e4416986a6cd2764737
-
libcurl4-openssl-dev_7.74.0-1.3+deb11u16+tuxcare.els2_armel.deb
sha:f80ca4a9ede73885f41589c918382107328bcbd5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
