Red Hat Security AdvisoryRHSA-2026:19106
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-05-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Hardened Images curl-8.20.0-2.hum1@aarch64, curl-8.20.0-2.hum1@src, curl-8.20.0-2.hum1@x86_64 +6
Fixes 2 records
Priority MEDIUM 63
Successfully using libcurl to do a transfer over a specific HTTP proxy (`proxyA`) with **Digest** authentication and then changing the proxy host to a second one (`proxyB`) for a second transfer, reusing the same handle,…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00471 · Published 2026-05-13 · Partial fix · 8.14.2, 8.16.1 +1 CWE-294
Priority MEDIUM 63
When curl is told to use the Certificate Status Request TLS extension, often referred to as *OCSP stapling*, to verify that the server certificate is valid, it fails to detect OCSP problems and instead wrongly consider t…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00274 · Published 2026-05-13 · Fixed CWE-295
