[ALSA-2026:96092] Important: curl security update
Type:
security
Severity:
important
Release date:
2026-11-09
Description:
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: curl: HTTP/2 upload Use-After-Free (CVE-2026-92392) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 curl-8.12.1-4.el10_2.8.aarch64.rpm 289158d73a984f82de56e3a4729d437888ae0c0e928469815fa1aae6b1ae6f66
aarch64 libcurl-devel-8.12.1-4.el10_2.8.aarch64.rpm 5d95eba4ff87ad3240a3fef2e6a3bee9abec5315b4dd75e338b68fcf222f0836
aarch64 libcurl-minimal-8.12.1-4.el10_2.8.aarch64.rpm a6d4bedb0011c9de8a9ee343c44aa99c7cf0f70c7a798d4373039d22a95e82e2
aarch64 libcurl-8.12.1-4.el10_2.8.aarch64.rpm dc72985f9572e4c274efeaeef5ec05b7bed809618d2ea3113153ddce2242bd49
ppc64le libcurl-minimal-8.12.1-4.el10_2.8.ppc64le.rpm 336ba938d650c305a8c94bbd4e5c0fd5163ddcfafba5efc374ec1bdb7dc109a1
ppc64le libcurl-8.12.1-4.el10_2.8.ppc64le.rpm 38ef6ca0b4462f3d67ff82fb9899cfe314ec3f7d0d2839563a4f81c46db68abb
ppc64le libcurl-devel-8.12.1-4.el10_2.8.ppc64le.rpm 9cb61dfb519e803dcdb3d8e09c2ddef09cd706ccf4eed5df60682207e5050e9f
ppc64le curl-8.12.1-4.el10_2.8.ppc64le.rpm cb9ac704190ae149aef77ac816894cc7a999aa522e102fa098fc3606466a35be
s390x libcurl-devel-8.12.1-4.el10_2.8.s390x.rpm 144e22b012a5184863d86fa85e9981298dc5aea42215402665fdd0b7faf46e6d
s390x curl-8.12.1-4.el10_2.8.s390x.rpm 1527a3b0a22b1fddc0276e0550ae7e5b0c9b2397c3a000a0dc8826b961911b85
s390x libcurl-minimal-8.12.1-4.el10_2.8.s390x.rpm 31aa0cbb272fa5b45c7c01b3fea6148a094212f6cbf3e680aafa9a43a6eedce4
s390x libcurl-8.12.1-4.el10_2.8.s390x.rpm 842c42353e58e2b751be872748f2ce05fc7bba7f2fe4bbd420b347b6eb84ce36
x86_64 libcurl-8.12.1-4.el10_2.8.x86_64.rpm 34baef5046d0e1c5f283193e6fafcddfab1ef93df2327ff23b1e9b5d728ff247
x86_64 libcurl-minimal-8.12.1-4.el10_2.8.x86_64.rpm 36b22a1ea420886ec0a63b68a746e355315f6e9a90ad024288008d4fe9b7de08
x86_64 libcurl-devel-8.12.1-4.el10_2.8.x86_64.rpm cfccaa3ede99d048ab8c29cf1d5628b4ba66b985742f59595777b597b1077c25
x86_64 curl-8.12.1-4.el10_2.8.x86_64.rpm d33e3eb902bc2036a180e6de3f3ff4e6bba9a0082741cd2bd9059a4cb91afa81
x86_64_v2 curl-8.12.1-4.el10_2.8.x86_64_v2.rpm 0c3473668d96fe96179fbd4b3702d0f852104d791875b4ced440c58393ba99c6
x86_64_v2 libcurl-minimal-8.12.1-4.el10_2.8.x86_64_v2.rpm 97514c3ea49df1d840119d6313a20b51c6499591ce268ac6fbfdf09d3a49ae35
x86_64_v2 libcurl-devel-8.12.1-4.el10_2.8.x86_64_v2.rpm a6e7454406cb55da46c39ca3edb5731f71fd744f83aa0f5d971a8671ac86edf1
x86_64_v2 libcurl-8.12.1-4.el10_2.8.x86_64_v2.rpm cb0eba0037760b5f03b5af58cc52bcf820c37c9596cd992a144b4b8e546ce8a4
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.