ALSA-2026:57462
ALSA-2026:57462 · Important: curl security, bug fix, and enhancement update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: curl: Insecure connection establishment due to TLS configuration mismatch (CVE-2026-8286) Bug Fix(es) and Enhancement(s): * Regression of AlmaLinux-73788. The .9 revision appears to have broken the logic that forces NTLM to use HTTP/1.1. (JIRA:AlmaLinux-171912) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fix available
- Published
- Updated
Stack: system
Affected products and versions
curl AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.61.1-34.el8_10.13
Update to 7.61.1-34.el8_10.13
libcurl AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.61.1-34.el8_10.13
Update to 7.61.1-34.el8_10.13
libcurl-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.61.1-34.el8_10.13
Update to 7.61.1-34.el8_10.13
libcurl-minimal AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 7.61.1-34.el8_10.13
Update to 7.61.1-34.el8_10.13