Skip to content
OpenAdvisories
High ELSA-2026-57462 1 CVE

Important: curl security, bug fix, and enhancement update (Oracle Linux 8)

Published Aug 20, 2026 · Updated Aug 20, 2026

Ecosystem: Oracle Linux

Summary

[7.61.1-34.el8_10.13]
- fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286)

[7.61.1-34.el8_10.12]
- NTLM: use HTTP/1.0 instead of HTTP/1.1 for compatibility (RHEL-171912)

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 8 curl 0:7.61.1-34.el8_10.13
Oracle Linux · 8 libcurl 0:7.61.1-34.el8_10.13
Oracle Linux · 8 libcurl-devel 0:7.61.1-34.el8_10.13
Oracle Linux · 8 libcurl-minimal 0:7.61.1-34.el8_10.13

Vulnerabilities 1

  • High 8.1
    CVE-2026-8286

    wrong STARTTLS connection reuse

    A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not.

    curl curl curl curl Debian Ubuntu Azure Linux Alpine