[CLSA-2026:1785421291] curl: Fix of CVE-2026-8286
Type:
security
Severity:
Important
Release date:
2026-07-30 14:21:43 UTC
Description:
- CVE-2026-8286: require a matching SSL configuration before reusing a pooled connection for a clear-text transfer that upgrades via STARTTLS
CVEs fixed:
Updated packages:
  • curl-7.61.1-34.el8.tuxcare.els10.x86_64.rpm
    sha:47e26034880439cad7da2ec1619f2870b96d34824331716ece8a48b54094578f
  • curl-minimal-7.61.1-34.el8.tuxcare.els10.x86_64.rpm
    sha:bae05f3af488b2a414a105c11f20e1990b9c48a32261b13ddafb1e92c35b663e
  • libcurl-7.61.1-34.el8.tuxcare.els10.i686.rpm
    sha:4689c8feaef2592e698342dd02fe508cf0bf7b3a79aeac9206760146bb1584c0
  • libcurl-7.61.1-34.el8.tuxcare.els10.x86_64.rpm
    sha:97c4a98f24161060c541e2a7062281dc0d4f8c5a01fc1eeb3aa8704cefd7a746
  • libcurl-devel-7.61.1-34.el8.tuxcare.els10.i686.rpm
    sha:2dcd5cc502d4560e09c01ad5f445f2bc3ba1eece60d3d93c469a7d40def37873
  • libcurl-devel-7.61.1-34.el8.tuxcare.els10.x86_64.rpm
    sha:5880935e173651a7c3067944f2071ebec6744c48f55903721b10c9be125a96b7
  • libcurl-minimal-7.61.1-34.el8.tuxcare.els10.i686.rpm
    sha:78d75125d3ac97091f4df39c8790453e99d34a82c17d52693e323c0d660a3d3f
  • libcurl-minimal-7.61.1-34.el8.tuxcare.els10.x86_64.rpm
    sha:156ed00a70c8f00cfbf20aade0f67d91b7bd2b77f2b0ff22083926c4aa343c31
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.