Red Hat Security Advisory

RHSA-2026:57462

curl security, bug fix, and enhancement update

Released 2026-08-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) curl-7.61.1-34.el8_10.13, libcurl-7.61.1-34.el8_10.13, libcurl-devel-7.61.1-34.el8_10.13 +1

Fixes 1 record

TI-2026-07301 CVE-2026-8286 · GHSA-32xh-3x3c-6g6h

wrong STARTTLS connection reuse

HIGH 70

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00309 Published 2026-07-03 Partial fix · 8.14.2, 8.16.1 +1 CWE-295