Release date:
2026-10-28 10:40:39 UTC
Description:
- CVE-2026-86414: do not react to 401 responses during HTTP proxy CONNECT
(credentials leak)
- CVE-2026-92389: verify the transfer direction in TFTP
- CVE-2026-92388: stop overwriting the write callback in FTP wildcard listings
Updated packages:
-
curl-7.29.0-59.0.3.el7_9.2.tuxcare.els6.aarch64.rpm
sha:abfe77c3c9fb7f648984f66c3e28385a5325d109ea62989400eed2dce268319c
-
curl-7.29.0-59.0.3.el7_9.2.tuxcare.els6.i686.rpm
sha:0a77a3f71bc78cbcf7e6b10ec3c7a316e4c46fc4de2fdcb7433daee927be72ce
-
curl-7.29.0-59.0.3.el7_9.2.tuxcare.els6.x86_64.rpm
sha:24714c7ad04d142f79f39c2eac476b2832f82aa3fef5d4094c6b550db601f038
-
libcurl-7.29.0-59.0.3.el7_9.2.tuxcare.els6.aarch64.rpm
sha:740677298cada59de8d33e23bffcc6b3b9704e06a0cccb39da40a6d8743b5606
-
libcurl-7.29.0-59.0.3.el7_9.2.tuxcare.els6.i686.rpm
sha:ab58136b90fc1fa296df6d5a61a647c2ece435d4b5d8ddb7ffc9b3a907c4ea0d
-
libcurl-7.29.0-59.0.3.el7_9.2.tuxcare.els6.x86_64.rpm
sha:e848918ce14db745770ec98ab1a1f3a1409106a5ff5bf49bc4298a85ee9931ae
-
libcurl-devel-7.29.0-59.0.3.el7_9.2.tuxcare.els6.aarch64.rpm
sha:dd8ecfdfb8a526a7327afa38b3ed8dd0a8cdd8d3a4b71c9f46d835aa67739855
-
libcurl-devel-7.29.0-59.0.3.el7_9.2.tuxcare.els6.i686.rpm
sha:3d2f0a46f9be9a2936c2badcb558c3c8e1d15e499f53dacaa76382a6fecdc9f3
-
libcurl-devel-7.29.0-59.0.3.el7_9.2.tuxcare.els6.x86_64.rpm
sha:cc67599b5cb675262fad5f569194bd81835ce347322c94cb407a3872b9304147
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
