[ALSA-2026:80511] Moderate: curl security update
Type:
security
Severity:
moderate
Release date:
2026-10-12
Description:
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: curl: Cookie injection via malicious HTTP server using super cookies (CVE-2026-8924) * curl: curl: Information disclosure via incorrect Digest authentication header reuse (CVE-2026-11856) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 curl-minimal-7.76.1-40.el9_8.8.aarch64.rpm 13758f649cd714a4e79e523744132f45f1abccabac18a8ac1fb780042473c648
aarch64 curl-7.76.1-40.el9_8.8.aarch64.rpm 7527d14118b49c0e08c9f40b257fef0b0c43b95ead50d37a633963725389d988
aarch64 libcurl-7.76.1-40.el9_8.8.aarch64.rpm 86b950b4db10df251fdc05cf382dee6a7def2a4ea41309bc02e95b5be5cc18c9
aarch64 libcurl-devel-7.76.1-40.el9_8.8.aarch64.rpm f6670848856ae092808022c13f93f12773c7b15a00b1abd11e5d32a6e996b0b3
aarch64 libcurl-minimal-7.76.1-40.el9_8.8.aarch64.rpm f94094206d06289213f8878acd39991bba1348607f94b27340e2e6a107e643cf
i686 libcurl-minimal-7.76.1-40.el9_8.8.i686.rpm 0720cda948eb2f32e281384a1643779eab69a61aaa039d1e549e31a4ccdc6a6f
i686 libcurl-7.76.1-40.el9_8.8.i686.rpm 1b81bb50c4195cc5320d021f9e1f9b8ecd69005fe3b5ce06f4e602b35dccaf23
i686 libcurl-devel-7.76.1-40.el9_8.8.i686.rpm d805fd7c0f7de0b00f0ee3abcba229b412ea577d6cf911588110bbdb2bd54592
ppc64le curl-7.76.1-40.el9_8.8.ppc64le.rpm 15b7b9d23a2d3d69d9b74889421a14769c095f658931c2a68ed0a020ec2d8be2
ppc64le libcurl-7.76.1-40.el9_8.8.ppc64le.rpm 5395724ed1b1aeffe61e50979043ed9d9b5b35f62c4a797b22e8a07c92a091af
ppc64le curl-minimal-7.76.1-40.el9_8.8.ppc64le.rpm 5bbaf3f0074a5de922c75d34f238fab6cbda31f2f1be328fde514e83b7ef2547
ppc64le libcurl-devel-7.76.1-40.el9_8.8.ppc64le.rpm 86d9d78387011ef51d8f4ae0fc787530e63a9c1d00a30d8e026b84c76fc12bf3
ppc64le libcurl-minimal-7.76.1-40.el9_8.8.ppc64le.rpm e9eb7af3dbba35e6abb7504acf4ab82b22bdb68fb85362651e1823482f4869f8
s390x curl-minimal-7.76.1-40.el9_8.8.s390x.rpm 3aefbe424d0131b21dc965df9917613c1327fde79bfbefced18bdb0cfb8fb42a
s390x libcurl-minimal-7.76.1-40.el9_8.8.s390x.rpm 5493854409d7593b2b87623a15f45095e8cc39cff58af46bbd0cbfc720046f59
s390x libcurl-7.76.1-40.el9_8.8.s390x.rpm 5d9cec726dbb23e967eb443f6dd3e7afe0937f375a724bf949d7a51b559c0978
s390x curl-7.76.1-40.el9_8.8.s390x.rpm 5dad1e46bd322e1b41963224d2a3f7461640c130373a68c8a4964299e5c99c36
s390x libcurl-devel-7.76.1-40.el9_8.8.s390x.rpm 986af42e634bcf77e1238c0c878e26b0cf3c15660c4221d219e9d6ca8315e7f5
x86_64 curl-7.76.1-40.el9_8.8.x86_64.rpm 344c547f5217b1c1077b9574e0e8883677154e5cbf22842aaee9f058335d87d9
x86_64 libcurl-minimal-7.76.1-40.el9_8.8.x86_64.rpm 79cd5179f761bc04114b510b2d3c563eca5e6c5bbcd3ba34b281d0c9f5fe7c0f
x86_64 curl-minimal-7.76.1-40.el9_8.8.x86_64.rpm b9b9006d73824b8670eda435fbb86b3a4335ee29d51fe98d3895b60f32334a89
x86_64 libcurl-7.76.1-40.el9_8.8.x86_64.rpm dc6c81855d85d8428e20bf93cc960701fe84fa36f41e9c7cff201570b90a4e65
x86_64 libcurl-devel-7.76.1-40.el9_8.8.x86_64.rpm e056b16928b48dde77b8f16181191606417e40f5b4e03b3bc4188aa0b304a063
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.