Release date:
2026-09-15 12:39:17 UTC
Description:
* SECURITY UPDATE: use-after-free in HTTP/2 server push transfers on shared
handles
- debian/patches/CVE-2026-18924.patch: make the duplicated handle created
for a server push stream inherit the share of its parent handle in
lib/http2.c
- CVE-2026-18924
Updated packages:
-
curl_7.68.0-1ubuntu2.25+tuxcare.els5_amd64.deb
sha:dea7474cdb69f7546183a59cfe2dd8f0f5875c3a
-
libcurl3-gnutls_7.68.0-1ubuntu2.25+tuxcare.els5_amd64.deb
sha:acf42885f7411fe431952cad3773ee733f607a55
-
libcurl3-nss_7.68.0-1ubuntu2.25+tuxcare.els5_amd64.deb
sha:3bc13f3a8096cd9e6559e2747903e99090177856
-
libcurl4_7.68.0-1ubuntu2.25+tuxcare.els5_amd64.deb
sha:09bd5be935aa757671d5335c760d14dfa84dfbe9
-
libcurl4-doc_7.68.0-1ubuntu2.25+tuxcare.els5_all.deb
sha:8f4e5156733bd373cfed279af9d4a3b4bfd71b7b
-
libcurl4-gnutls-dev_7.68.0-1ubuntu2.25+tuxcare.els5_amd64.deb
sha:63c86d49fcfe7bf710ccea1b627ea05028223dfb
-
libcurl4-nss-dev_7.68.0-1ubuntu2.25+tuxcare.els5_amd64.deb
sha:a5b5128c7bd4be822c3cbca16df1da37707e3080
-
libcurl4-openssl-dev_7.68.0-1ubuntu2.25+tuxcare.els5_amd64.deb
sha:0bd7b2a109474c3ee6d41266f9e9a84ddae6e07d
-
curl_7.68.0-1ubuntu2.25+tuxcare.els5_arm64.deb
sha:7938e82c916f56092fcb3795119e1cee00454a6c
-
libcurl3-gnutls_7.68.0-1ubuntu2.25+tuxcare.els5_arm64.deb
sha:e21c4b94400e7fb971d31016bda1f027eac268d0
-
libcurl3-nss_7.68.0-1ubuntu2.25+tuxcare.els5_arm64.deb
sha:63bb3846c8933c169afee4cfd3e9406abfac90af
-
libcurl4_7.68.0-1ubuntu2.25+tuxcare.els5_arm64.deb
sha:06e515e4d7a47d50fc34f8c926c93605cb24bd63
-
libcurl4-gnutls-dev_7.68.0-1ubuntu2.25+tuxcare.els5_arm64.deb
sha:54d2266f43a1136453ac23b146be4692e7b4fee1
-
libcurl4-nss-dev_7.68.0-1ubuntu2.25+tuxcare.els5_arm64.deb
sha:1d337839648627adad86139f155ff0ab5efa4722
-
libcurl4-openssl-dev_7.68.0-1ubuntu2.25+tuxcare.els5_arm64.deb
sha:9018ae79ad4a98f022a5a0a4408fdc29cf4830cc
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
