Release date:
2026-10-08 23:00:47 UTC
Description:
* SECURITY UPDATE: wrong connection reuse across Negotiate service names
- debian/patches/CVE-2026-8458.patch: keep the service name and the
proxy service name on the connection and compare them when looking
for a connection to reuse in lib/urldata.h, lib/url.c and
lib/http_negotiate.c.
- CVE-2026-8458
Updated packages:
-
curl_7.74.0-1.3+deb11u16+tuxcare.els3_amd64.deb
sha:528ac6fb469b8448050f1f22e240d3d04a67353d
-
libcurl3-gnutls_7.74.0-1.3+deb11u16+tuxcare.els3_amd64.deb
sha:66ae0d2cc96b7f25def8a303c5ce33ca8537836c
-
libcurl3-nss_7.74.0-1.3+deb11u16+tuxcare.els3_amd64.deb
sha:ebe2d3dbb7ae3003b93e82c45d28b52ed450a32f
-
libcurl4_7.74.0-1.3+deb11u16+tuxcare.els3_amd64.deb
sha:66ffeb804f13ca9924f2edd17329c58572dd68a4
-
libcurl4-doc_7.74.0-1.3+deb11u16+tuxcare.els3_all.deb
sha:758f1403d672af997776886e19b16bcad0c7c3e2
-
libcurl4-gnutls-dev_7.74.0-1.3+deb11u16+tuxcare.els3_amd64.deb
sha:e6c51b92e47c97ba9c3c522f3ed7ccdc794eaf70
-
libcurl4-nss-dev_7.74.0-1.3+deb11u16+tuxcare.els3_amd64.deb
sha:a4c45b765533e2850e818ff9a50fa029efe67dfa
-
libcurl4-openssl-dev_7.74.0-1.3+deb11u16+tuxcare.els3_amd64.deb
sha:0bdfbe713771d6bc07361836ead0111f7623dc4f
-
curl_7.74.0-1.3+deb11u16+tuxcare.els3_arm64.deb
sha:a2eda5d48671f7978f4e8ae6a4d50ec1654ddfb3
-
libcurl3-gnutls_7.74.0-1.3+deb11u16+tuxcare.els3_arm64.deb
sha:0f6738849425a0d06a7ad9f6fc9f53f4b501813d
-
libcurl3-nss_7.74.0-1.3+deb11u16+tuxcare.els3_arm64.deb
sha:14473c896594c8beae94fcdb116e77766e28fd14
-
libcurl4_7.74.0-1.3+deb11u16+tuxcare.els3_arm64.deb
sha:8d2b71247b9f0200fe49a1f7c188a98c2a4a3724
-
libcurl4-gnutls-dev_7.74.0-1.3+deb11u16+tuxcare.els3_arm64.deb
sha:c72926858b679e10c25cfd003df0c4bada812e14
-
libcurl4-nss-dev_7.74.0-1.3+deb11u16+tuxcare.els3_arm64.deb
sha:a518bb96d2423ce4fd0b72c930b8d3f3f0e81d34
-
libcurl4-openssl-dev_7.74.0-1.3+deb11u16+tuxcare.els3_arm64.deb
sha:f7113aa74cd54a051df5afedd9fcf740ec24e217
-
curl_7.74.0-1.3+deb11u16+tuxcare.els3_armel.deb
sha:f13f8e97e659dc479f4d4ad66ca04cf475b3866f
-
libcurl3-gnutls_7.74.0-1.3+deb11u16+tuxcare.els3_armel.deb
sha:69dd617fc6f21837b8a27df164ed44e8a03d66d8
-
libcurl3-nss_7.74.0-1.3+deb11u16+tuxcare.els3_armel.deb
sha:bfa7cd5e28f7ccb86e1c43fb698d8bd55abcd192
-
libcurl4_7.74.0-1.3+deb11u16+tuxcare.els3_armel.deb
sha:d6debb0a87d460d72f038383e6a888122dc79c45
-
libcurl4-gnutls-dev_7.74.0-1.3+deb11u16+tuxcare.els3_armel.deb
sha:ecacd1faaad1b98f4cd3f8134bb915b3d6311f4a
-
libcurl4-nss-dev_7.74.0-1.3+deb11u16+tuxcare.els3_armel.deb
sha:f6e6163fe434ec3e80dd21a1112630ef50a7e4ff
-
libcurl4-openssl-dev_7.74.0-1.3+deb11u16+tuxcare.els3_armel.deb
sha:882151f9530ee0577ee30bb12d5d7f6ec696e529
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
