CLSA-2026-1773135327

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1773135327.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1773135327
Upstream
Published
2026-03-10T09:35:32Z
Modified
2026-06-01T00:33:23.275686722Z
Summary
curl: Fix of 2 CVEs
Details
  • CVE-2025-14524: prevent bearer token leak on cross-protocol redirect
  • CVE-2025-15079: set both SSH knownhosts options to the same file to prevent libssh global known_hosts override
References

Affected packages

TuxCare:CentOS:8.5 / curl

Package

Name
curl
Purl
pkg:rpm/tuxcare/curl?distro=centos-8.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
7.61.1-22.el8.tuxcare.els16

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1773135327.json"

TuxCare:CentOS:8.5 / curl-minimal

Package

Name
curl-minimal
Purl
pkg:rpm/tuxcare/curl-minimal?distro=centos-8.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
7.61.1-22.el8.tuxcare.els16

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1773135327.json"

TuxCare:CentOS:8.5 / libcurl

Package

Name
libcurl
Purl
pkg:rpm/tuxcare/libcurl?distro=centos-8.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
7.61.1-22.el8.tuxcare.els16

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1773135327.json"

TuxCare:CentOS:8.5 / libcurl-devel

Package

Name
libcurl-devel
Purl
pkg:rpm/tuxcare/libcurl-devel?distro=centos-8.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
7.61.1-22.el8.tuxcare.els16

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1773135327.json"

TuxCare:CentOS:8.5 / libcurl-minimal

Package

Name
libcurl-minimal
Purl
pkg:rpm/tuxcare/libcurl-minimal?distro=centos-8.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
7.61.1-22.el8.tuxcare.els16

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1773135327.json"