[CLSA-2026:1783942033] curl: Fix of CVE-2026-11856
Type:
security
Severity:
Moderate
Release date:
2026-07-13 11:27:28 UTC
Description:
- CVE-2026-11856: flush Digest auth state on origin or credential change to avoid leaking the Authorization header across origins on handle reuse
CVEs fixed:
Updated packages:
  • curl-7.61.1-22.el8.tuxcare.els20.x86_64.rpm
    sha:14bfaf1e8e48bfbe7cd6d53decd71fdb6cbfbf8f738851165872667048a96dad
  • curl-minimal-7.61.1-22.el8.tuxcare.els20.x86_64.rpm
    sha:c1cb29d1fa3d1551394d926d5d6aba385d01aab8268b7fab6174c9b4d2bacd73
  • libcurl-7.61.1-22.el8.tuxcare.els20.i686.rpm
    sha:c12971b57f64643d70c22d7e009de4d102e4253043e6d96b3b44251525e375f6
  • libcurl-7.61.1-22.el8.tuxcare.els20.x86_64.rpm
    sha:95e75af432c467fbbc59fd358c6564830cbab1b26d93859f62ebce15108b9bcd
  • libcurl-devel-7.61.1-22.el8.tuxcare.els20.i686.rpm
    sha:9491b1691d2b366c5e25eb87cd68309ec0ff88381b37a3ee410e36623451d86b
  • libcurl-devel-7.61.1-22.el8.tuxcare.els20.x86_64.rpm
    sha:68289f079d5a58ca57f40956e8d2c20127eb3e5f29206a155bc08110f16a8fcf
  • libcurl-minimal-7.61.1-22.el8.tuxcare.els20.i686.rpm
    sha:30d090a6ecfa0f017d5d4eb50cb343305233d907044ca45dea615ed3b9028692
  • libcurl-minimal-7.61.1-22.el8.tuxcare.els20.x86_64.rpm
    sha:90b7e78424a269826809c259a5c7df3c1b5d5144b0ec6e930cbc388234b5ca10
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.