[ALSA-2026:57462] Important: curl security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-08-21
Description:
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: curl: Insecure connection establishment due to TLS configuration mismatch (CVE-2026-8286) Bug Fix(es) and Enhancement(s): * Regression of AlmaLinux-73788. The .9 revision appears to have broken the logic that forces NTLM to use HTTP/1.1. (JIRA:AlmaLinux-171912) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 curl-7.61.1-34.el8_10.13.aarch64.rpm 34b26a1106e168d42b977118cdc6efa12be8a9aa92213c6a562f03f07801a412
aarch64 libcurl-devel-7.61.1-34.el8_10.13.aarch64.rpm 82f5555fd6f1e4ca0aef87f9c75967a1a9c0be17b79cd5d9d27547a990aa4fb1
aarch64 libcurl-minimal-7.61.1-34.el8_10.13.aarch64.rpm 8f77b6116c402e89c51a8b3924f47553489958d6970377de8931415af542a233
aarch64 libcurl-7.61.1-34.el8_10.13.aarch64.rpm ab031506f412a8441d9db2b3295137b14187d4e63d5bd1207c30c998533d108c
i686 libcurl-7.61.1-34.el8_10.13.i686.rpm b9702d768d31e0fcb63fd31611e86545973bb0cd53d18abd1ca5c9695147c862
i686 libcurl-minimal-7.61.1-34.el8_10.13.i686.rpm dab3e1e4f66e25c7def029bd7741fa36cbc6e6056748bbd234a152d7d1cfc5d5
i686 libcurl-devel-7.61.1-34.el8_10.13.i686.rpm fb7a774a7fec8d5ef0e51a16abb0dc60822fbaee9e882e9c910227e5cef60244
ppc64le libcurl-7.61.1-34.el8_10.13.ppc64le.rpm 39a0179d4a825ad1b19c0f1116a2e5b2cd2e6c5ba296d413240625be701e1849
ppc64le libcurl-devel-7.61.1-34.el8_10.13.ppc64le.rpm 65c8b72b3910021007c3721438d21ae128f1501ecd3aaf241a2390c5cb084169
ppc64le libcurl-minimal-7.61.1-34.el8_10.13.ppc64le.rpm 94e1bca8e8c2764c2893b3450bd96dc4316d307e62f28b78bf9626641dd1f80a
ppc64le curl-7.61.1-34.el8_10.13.ppc64le.rpm e4491cd1a94370669d77d8d9bec248fe4105385d534d3d6a99105b8aedc94519
s390x libcurl-minimal-7.61.1-34.el8_10.13.s390x.rpm 5d81c3d13a4ff27ac182904b462a8f3a35a89f7b97b3adee24d3680470cacd7d
s390x curl-7.61.1-34.el8_10.13.s390x.rpm 794e29c7f27bc1e8fdd8228bd27ce5f0e602620e3dcbe510c7ad296235b36ad9
s390x libcurl-devel-7.61.1-34.el8_10.13.s390x.rpm bc5c0d2d3ab3aa12dd50fa3b5696d961e10f6c19f015676cb5d65df05b3038f4
s390x libcurl-7.61.1-34.el8_10.13.s390x.rpm e9441a04e1db1aea95860e3f123091d90add96aeed8f79e912954796b4f529e2
x86_64 libcurl-devel-7.61.1-34.el8_10.13.x86_64.rpm 3f2779031f970859b79bcce807375227ddafe9acd4af2744e90a059b833d51ef
x86_64 libcurl-minimal-7.61.1-34.el8_10.13.x86_64.rpm 5917416bc959dea7f5c8cd661091917836beb468dd87ad6bd96d1a5f0e068e3c
x86_64 libcurl-7.61.1-34.el8_10.13.x86_64.rpm b5edb53e3be856c3c1e4c4d35aad82bf71f5c497b65364c6bdcc0dc616916a20
x86_64 curl-7.61.1-34.el8_10.13.x86_64.rpm f9358668e0085d555474a92309838e25a12abfcedf41cf51e741e01ec9a1ca62
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.