ALSA-2026:57462
ALSA-2026:57462 · Important: curl security, bug fix, and enhancement update
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: curl: Insecure connection establishment due to TLS configuration mismatch (CVE-2026-8286) Bug Fix(es) and Enhancement(s): * Regression of AlmaLinux-73788. The .9 revision appears to have broken the logic that forces NTLM to use HTTP/1.1. (JIRA:AlmaLinux-171912) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
curl AlmaLinux:8
- Plages de versions concernées
- ECOSYSTEM: < 7.61.1-34.el8_10.13
Mettez à jour vers 7.61.1-34.el8_10.13
libcurl AlmaLinux:8
- Plages de versions concernées
- ECOSYSTEM: < 7.61.1-34.el8_10.13
Mettez à jour vers 7.61.1-34.el8_10.13
libcurl-devel AlmaLinux:8
- Plages de versions concernées
- ECOSYSTEM: < 7.61.1-34.el8_10.13
Mettez à jour vers 7.61.1-34.el8_10.13
libcurl-minimal AlmaLinux:8
- Plages de versions concernées
- ECOSYSTEM: < 7.61.1-34.el8_10.13
Mettez à jour vers 7.61.1-34.el8_10.13