[CLSA-2026:1793163434] curl: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-28 18:26:19 UTC
Description:
- CVE-2026-86414: do not react to 401 responses during HTTP proxy CONNECT (credentials leak) - CVE-2026-92389: verify the transfer direction in TFTP - CVE-2026-92388: stop overwriting the write callback in FTP wildcard listings
CVEs fixed:
Updated packages:
  • curl-7.29.0-59.0.3.el7_9.2.tuxcare.els6.i686.rpm
    sha:ce7ece804d59c065858a0bf818f00ff362813157cd713c1965110a845a954ea0
  • curl-7.29.0-59.0.3.el7_9.2.tuxcare.els6.x86_64.rpm
    sha:3d46434961eebb7ff1cd0213eed91089aa4456e817e3525785830ac750487f7e
  • libcurl-7.29.0-59.0.3.el7_9.2.tuxcare.els6.i686.rpm
    sha:2a49ca0ab724bafbbc1594366190fc200ec94ad333061da9fe075a3d3a8fe30c
  • libcurl-7.29.0-59.0.3.el7_9.2.tuxcare.els6.x86_64.rpm
    sha:6cbf54fe1b1936a7601eee59e8f115179e18f41c36b8a02ab869b46f7cb9f2ce
  • libcurl-devel-7.29.0-59.0.3.el7_9.2.tuxcare.els6.i686.rpm
    sha:c6f7b113b3a33dae71da909f6447129c0538e72fd690c27fe4dc6409b23dfa34
  • libcurl-devel-7.29.0-59.0.3.el7_9.2.tuxcare.els6.x86_64.rpm
    sha:d088fd234ea18a28bf9ea89b5afe7ee9d3852fc7fca4d745b4ceca22677607ab
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.