CLSA-2026-1786091577

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786091577.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1786091577
Upstream
CVE (2)
Published
2026-08-07T08:33:07Z
Modified
2026-10-26T09:31:26Z
Summary
curl: Fix of 2 CVEs
Details
  • CVE-2026-8458: tie the requested SASL/SPNEGO service name to the connection and compare it when matching an existing connection for reuse, so a Negotiate authenticated connection is not reused for a transfer that asked for a different service
  • CVE-2026-8926: discard a .netrc entry that matches the host but whose login does not match the user given in the URL, so the password that belongs to another user of that host is no longer returned as a successful lookup
References

Affected packages

TuxCare:AlmaLinux:9.6
curl

Package

Name
curl
Purl
pkg:rpm/tuxcare/curl?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.76.1-31.el9_6.1.tuxcare.els18

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786091577.json"
curl-minimal

Package

Name
curl-minimal
Purl
pkg:rpm/tuxcare/curl-minimal?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.76.1-31.el9_6.1.tuxcare.els18

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786091577.json"
libcurl

Package

Name
libcurl
Purl
pkg:rpm/tuxcare/libcurl?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.76.1-31.el9_6.1.tuxcare.els18

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786091577.json"
libcurl-devel

Package

Name
libcurl-devel
Purl
pkg:rpm/tuxcare/libcurl-devel?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.76.1-31.el9_6.1.tuxcare.els18

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786091577.json"
libcurl-minimal

Package

Name
libcurl-minimal
Purl
pkg:rpm/tuxcare/libcurl-minimal?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.76.1-31.el9_6.1.tuxcare.els18

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786091577.json"