Red Hat Security AdvisoryRHSA-2026:55439
curl security update
Released 2026-08-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) libcurl-devel-7.76.1-40.el9_8.5
- Red Hat Enterprise Linux BaseOS (v. 9) curl-7.76.1-40.el9_8.5, curl-minimal-7.76.1-40.el9_8.5, libcurl-7.76.1-40.el9_8.5 +1
Fixes 4 records
Priority HIGH 70
A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00309 · Published 2026-07-03 · Partial fix · 8.14.2, 8.16.1 +1 CWE-295
Priority HIGH 68
When a libcurl-based application performs transfers via `SCP://` or `SFTP://` and utilizes the `CURLOPT_SSH_KEYFUNCTION` callback, it may silently accept an untrusted server.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00361 · Published 2026-07-03 · Partial fix · 8.14.2, 8.16.1 +1 CWE-297
Priority MEDIUM 63
When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some circumstances.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00495 · Published 2026-03-11 · Partial fix · 8.14.2, 8.16.1 +1 CWE-522
Priority LOW 29
libcurl can in some circumstances reuse the wrong connection when asked to do an Negotiate-authenticated HTTP or HTTPS request.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00297 · Published 2026-03-11 · Partial fix · 8.14.2, 8.16.1 +1 CWE-305
THREATIST.IORead the docs