[CLSA-2026:1793163069] curl: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-28 04:51:21 UTC
Description:
- CVE-2026-86414: do not react to 401 responses during HTTP proxy CONNECT (credentials leak) - CVE-2026-92389: verify the transfer direction in TFTP - CVE-2026-92388: stop overwriting the write callback in FTP wildcard listings
Updated packages:
  • curl-7.29.0-59.0.3.el7_9.2.tuxcare.els6.i686.rpm
    sha:1977343784a0336c0ccc0a5e40ddc1e01d266ef9de487d47b99c6065cd80f1f6
  • curl-7.29.0-59.0.3.el7_9.2.tuxcare.els6.x86_64.rpm
    sha:4a7bb716872e31393ca82a7b4342f9cfc959db07d75ab9cf6f6792f751415eff
  • libcurl-7.29.0-59.0.3.el7_9.2.tuxcare.els6.i686.rpm
    sha:9c1c99c202d255a585b90be9a31d58051deb3885772bcf1605825dbe6e9bf38b
  • libcurl-7.29.0-59.0.3.el7_9.2.tuxcare.els6.x86_64.rpm
    sha:c09b903fd2de078de4e3b81f0dc84eca2f4dfd7b58d8fb12dccd48591dfeece7
  • libcurl-devel-7.29.0-59.0.3.el7_9.2.tuxcare.els6.i686.rpm
    sha:522ca155dd06c98479f78f13e32ab008e2a9c2aa545bebb0b9182d2f4082ea3b
  • libcurl-devel-7.29.0-59.0.3.el7_9.2.tuxcare.els6.x86_64.rpm
    sha:59e2cca8d952025c0f5e43f73e1dedbbbbf722858032fef5a311569253c2b4f4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.