ALSA-2026:92907

See a problem?
Please try reporting it to the source first.
Source
https://errata.almalinux.org/9/ALSA-2026-92907.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:92907.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2026:92907
Upstream
Related
Published
2026-10-29T00:00:00Z
Modified
2026-10-30T14:15:02Z
Summary
Moderate: curl security update
Details

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

  • libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse (CVE-2026-8932)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:9 / curl

Package

Name
curl
Purl
pkg:rpm/almalinux/curl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.76.1-40.el9_8.9

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:92907.json"

AlmaLinux:9 / curl-minimal

Package

Name
curl-minimal
Purl
pkg:rpm/almalinux/curl-minimal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.76.1-40.el9_8.9

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:92907.json"

AlmaLinux:9 / libcurl

Package

Name
libcurl
Purl
pkg:rpm/almalinux/libcurl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.76.1-40.el9_8.9

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:92907.json"

AlmaLinux:9 / libcurl-devel

Package

Name
libcurl-devel
Purl
pkg:rpm/almalinux/libcurl-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.76.1-40.el9_8.9

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:92907.json"

AlmaLinux:9 / libcurl-minimal

Package

Name
libcurl-minimal
Purl
pkg:rpm/almalinux/libcurl-minimal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.76.1-40.el9_8.9

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:92907.json"