Release date:
2026-10-28 04:57:56 UTC
Description:
- CVE-2026-86414: do not react to 401 responses during HTTP proxy CONNECT
(credentials leak)
- CVE-2026-92389: verify the transfer direction in TFTP
- CVE-2026-92388: stop overwriting the write callback in FTP wildcard listings
Updated packages:
-
curl-7.29.0-59.0.3.el7_9.2.tuxcare.els6.i686.rpm
sha:75fb04b7d154baa0401fa1a067733dec2e58b864fd3aab8af8d85b1048ebcdf2
-
curl-7.29.0-59.0.3.el7_9.2.tuxcare.els6.x86_64.rpm
sha:9243df7e4d17c1c60d9eaf56ecf17ac0e813882bc4824ae0eb079880f3fdc0c0
-
libcurl-7.29.0-59.0.3.el7_9.2.tuxcare.els6.i686.rpm
sha:f23b2c8c4a2938a72015ce005f023672e566813156dd258065f43beb88abaabb
-
libcurl-7.29.0-59.0.3.el7_9.2.tuxcare.els6.x86_64.rpm
sha:c458f2e44442c1fc95682d42fa34afa66e8892062d8b2a729d3eb6997e752dce
-
libcurl-devel-7.29.0-59.0.3.el7_9.2.tuxcare.els6.i686.rpm
sha:386feb24d393db664029f8a184775cbb37803bdd3a0a8d7a80a099ebc7c4b535
-
libcurl-devel-7.29.0-59.0.3.el7_9.2.tuxcare.els6.x86_64.rpm
sha:4188eefbe3a24b2303c443a5d40b931c6f5a2e22e46e32b97240bd422caf2079
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
