p PatchFirst

ALPINE-CVE-2026-8932

ALPINE-CVE-2026-8932

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse. libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, some TLS settings related to client certificates were left out from the configuration match checks, making them match too easily. In particular options related to the private key.

CVSS 7.5 · Élevée · Correctif disponible

Publication
Mise à jour

Pile logicielle: system

Produits et versions concernés

  • curl Alpine:v3.23

    Plages de versions concernées
    • ECOSYSTEM: ≥ 7.7, < 8.22.0-r0

    Mettez à jour vers 8.22.0-r0

  • curl Alpine:v3.24

    Plages de versions concernées
    • ECOSYSTEM: ≥ 7.7, < 8.21.0-r0

    Mettez à jour vers 8.21.0-r0

Sources originales

Vérifiez votre serveur →