Red Hat Security AdvisoryRHSA-2026:92907
curl security update
Released 2026-10-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) libcurl-devel-7.76.1-40.el9_8.9
- Red Hat Enterprise Linux BaseOS (v. 9) curl-7.76.1-40.el9_8.9, curl-minimal-7.76.1-40.el9_8.9, libcurl-7.76.1-40.el9_8.9 +1
Fixes 1 record
Priority HIGH 72
libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00396 · Published 2026-07-03 · Partial fix · 8.14.2, 8.16.1 +1 CWE-305
