[ALSA-2026:80512] Moderate: curl security update
Type:
security
Severity:
moderate
Release date:
2026-10-13
Description:
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies (CVE-2026-6253) * curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse (CVE-2026-5545) * curl: libcurl: Credential leak via reused proxy connection during HTTP redirects (CVE-2026-6429) * curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse (CVE-2026-7168) * libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service (CVE-2026-10536) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 libcurl-devel-8.12.1-4.el10_2.7.aarch64.rpm 1e279b916bc0fbb05916f66a920b55e0329dcff97c5a028503b6df8e6d3f6b25
aarch64 libcurl-8.12.1-4.el10_2.7.aarch64.rpm 9ffd93ebba0632fd25a9b84c3a172100e8c7e897dc2db6ac1fa097553dce047a
aarch64 libcurl-minimal-8.12.1-4.el10_2.7.aarch64.rpm ad0989fa2a066ec63da6d89259ec4b5f945b91262ee53d8b7b164b58c72ade7b
aarch64 curl-8.12.1-4.el10_2.7.aarch64.rpm efacc12bdb59eabada2ff2deb81f96a6eed97a2c511cd58fc2ee93f14ab6f449
ppc64le libcurl-8.12.1-4.el10_2.7.ppc64le.rpm 73fab8ce62ec16b24b19752c53bd21dbea5e03d7036577b351972bb2e022f081
ppc64le libcurl-minimal-8.12.1-4.el10_2.7.ppc64le.rpm 75172d5409395018aefb4cfc377408ad6f0b45ddfc1f9ff3d55fc6aa92af2dd3
ppc64le curl-8.12.1-4.el10_2.7.ppc64le.rpm 7e00056581d4b7753762f0839cca936fbb6f78d45079e8098b839187795e3cb6
ppc64le libcurl-devel-8.12.1-4.el10_2.7.ppc64le.rpm c8f9b3644bb7aeedc70f940c2bf4270c25f13cf1be4d1d1ec2bf38d9f0acce01
s390x libcurl-minimal-8.12.1-4.el10_2.7.s390x.rpm 17d92909471f05b5e84159c810c1239ef3cb61d7f486abe16ec6a22b0573e85e
s390x curl-8.12.1-4.el10_2.7.s390x.rpm 7400286ae974a791783b2b9bfb95447c0082afb570db7a221f6f940e9209d02a
s390x libcurl-8.12.1-4.el10_2.7.s390x.rpm be94e8cdb453b6eb076adbbb02a957ac1bfe5757bbe9de73e76556c39720fd4a
s390x libcurl-devel-8.12.1-4.el10_2.7.s390x.rpm cda5ebc112b48c8cbf83bdd7401f5dad4af6e768c95bab359b680731d6bfe19a
x86_64 libcurl-8.12.1-4.el10_2.7.x86_64.rpm 9538970238365449228350182da2890db45aa08321b81819f2f661f8883c449e
x86_64 libcurl-devel-8.12.1-4.el10_2.7.x86_64.rpm b5d9ee2c25b857a61eb8615bbab4e5ff12181a7735079e6b5250120d5accfa52
x86_64 curl-8.12.1-4.el10_2.7.x86_64.rpm d5d49bf28afc392c3b756093fe30a0dd02b5b2c8a39f4328ba8732a022d80dc8
x86_64 libcurl-minimal-8.12.1-4.el10_2.7.x86_64.rpm f9e5c8db4104fea73e4a86df5a6c4f3cd2dcc55416c10c6210e4e344b948246a
x86_64_v2 curl-8.12.1-4.el10_2.7.x86_64_v2.rpm 31210db916a8ab458a13cb2fafe15d22281a34c0aa0279e0b85a1dc2f1f3f296
x86_64_v2 libcurl-devel-8.12.1-4.el10_2.7.x86_64_v2.rpm 3331c37aea6bc1db0e80bfc598ad000fde602baeb4a1feb66b947950b1336f7a
x86_64_v2 libcurl-8.12.1-4.el10_2.7.x86_64_v2.rpm 55d96ed1beac8dd9cf95c2984e36d1080f1d173adb3835e20b79f0aeb9ac1758
x86_64_v2 libcurl-minimal-8.12.1-4.el10_2.7.x86_64_v2.rpm c8c2ae51c49c3b9fb5d9b13cbb7fb8cac78ff95d07000726daa2b98f2134709e
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.