Skip to content
OpenAdvisories
High RHSA-2026:12916 6 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published May 3, 2026 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 curl 0:8.20.0-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 libcurl 0:8.20.0-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 libcurl-devel 0:8.20.0-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 libcurl-minimal 0:8.20.0-0.1.hum1

Vulnerabilities 6

  • High 7.5
    CVE-2026-5773

    wrong reuse of SMB connection

    libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When reusing a connection a range of criteria mu…

    curl curl curl curl Debian Ubuntu Alpine
  • High 7.5
    CVE-2026-6276

    stale custom cookie host causes cookie leak

    Using libcurl, when a custom `Host:` header is first set for an HTTP request and a second request is subsequently done using the same *easy handle* but without the custom `Host:` header set, the second request would use stale information and pass on cookies m…

    curl curl curl curl Debian Ubuntu Azure Linux Alpine
  • Medium 6.5
    CVE-2026-5545

    wrong reuse of HTTP Negotiate connection

    libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTP(S) request after a Negotiate-authenticated one, when both use the same host. libcurl features a pool of recent connections so that subsequent requests can re…

    curl curl curl curl Debian Ubuntu Azure Linux Alpine
  • Medium 5.9
    CVE-2026-4873

    connection reuse ignores TLS requirement

    A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request to that same host bypasse…

    curl curl curl curl Debian Ubuntu Azure Linux Alpine
  • Medium 5.9
    CVE-2026-6253

    proxy credentials leak over redirect-to proxy

    curl might erroneously pass on credentials for a first proxy to a second proxy. This can happen when the following conditions are true: 1. curl is setup to use specific different proxies for different URL schemes 2. the first proxy needs credentials 3. the se…

    curl curl curl curl Debian Ubuntu Azure Linux Alpine
  • Medium 5.3
    CVE-2026-6429

    netrc credential leak with reused proxy connection

    When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the followed-to host under certain circumstances.

    curl curl curl curl Debian Ubuntu Azure Linux Alpine

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-6253
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2026-6429
  • report
    https://access.redhat.com/security/cve/CVE-2026-6276
  • report
    https://access.redhat.com/security/cve/CVE-2026-5773
  • report
    https://access.redhat.com/security/cve/CVE-2026-5545
  • report
    https://access.redhat.com/security/cve/CVE-2026-4873
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_12916.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2461200
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-4873
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-4873
  • article
    https://curl.se/docs/CVE-2026-4873.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2461204
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-5545
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-5545
  • article
    https://curl.se/docs/CVE-2026-5545.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2461201
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-5773
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-5773
  • article
    https://curl.se/docs/CVE-2026-5773.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2461202
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-6253
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-6253
  • article
    https://curl.se/docs/CVE-2026-6253.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2461203
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-6276
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-6276
  • article
    https://curl.se/docs/CVE-2026-6276.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2461205
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-6429
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-6429
  • article
    https://curl.se/docs/CVE-2026-6429.html