TI-2025-08328 CVE-2025-9086 · GHSA-v676-f8gm-92r9
Out of bounds read for cookie path
Priority LOW 36
1. A cookie is set using the `secure` keyword for `https://target` 2.
RHSA-2026:1825
curl security update
Released 2026-02-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) libcurl-devel-8.12.1-2.el10_1.2
- Red Hat Enterprise Linux BaseOS (v. 10) curl-8.12.1-2.el10_1.2, libcurl-8.12.1-2.el10_1.2, libcurl-minimal-8.12.1-2.el10_1.2