Skip to content
OpenAdvisories
Critical RHSA-2026:80512 5 CVEs

Red Hat Security Advisory: curl security update

Published Oct 14, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.2 curl 0:8.12.1-4.el10_2.7
Red Hat · RHEL 10 enterprise_linux:10.2 curl-debuginfo 0:8.12.1-4.el10_2.7
Red Hat · RHEL 10 enterprise_linux:10.2 curl-debugsource 0:8.12.1-4.el10_2.7
Red Hat · RHEL 10 enterprise_linux:10.2 libcurl 0:8.12.1-4.el10_2.7
Red Hat · RHEL 10 enterprise_linux:10.2 libcurl-debuginfo 0:8.12.1-4.el10_2.7
Red Hat · RHEL 10 enterprise_linux:10.2 libcurl-devel 0:8.12.1-4.el10_2.7
Red Hat · RHEL 10 enterprise_linux:10.2 libcurl-minimal 0:8.12.1-4.el10_2.7
Red Hat · RHEL 10 enterprise_linux:10.2 libcurl-minimal-debuginfo 0:8.12.1-4.el10_2.7

Vulnerabilities 5

  • Critical 9.8
    CVE-2026-10536

    HTTP/2 stream-dependency tree UAF

    A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via `CURLOPT_STREAM_DEPENDS` or `CURLOPT_STREAM_DEPENDS_E`, subsequently invokes `curl_easy_reset()`, and finally terminates the handle with `curl…

    curl curl curl curl Debian Ubuntu Azure Linux Alpine
  • Medium 6.5
    CVE-2026-5545

    wrong reuse of HTTP Negotiate connection

    libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTP(S) request after a Negotiate-authenticated one, when both use the same host. libcurl features a pool of recent connections so that subsequent requests can re…

    curl curl curl curl Debian Ubuntu Azure Linux Alpine
  • Medium 5.9
    CVE-2026-6253

    proxy credentials leak over redirect-to proxy

    curl might erroneously pass on credentials for a first proxy to a second proxy. This can happen when the following conditions are true: 1. curl is setup to use specific different proxies for different URL schemes 2. the first proxy needs credentials 3. the se…

    curl curl curl curl Debian Ubuntu Azure Linux Alpine
  • Medium 5.3
    CVE-2026-6429

    netrc credential leak with reused proxy connection

    When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the followed-to host under certain circumstances.

    curl curl curl curl Debian Ubuntu Azure Linux Alpine
  • Medium 5.3
    CVE-2026-7168

    cross-proxy Digest auth state leak

    Successfully using libcurl to do a transfer over a specific HTTP proxy (`proxyA`) with **Digest** authentication and then changing the proxy host to a second one (`proxyB`) for a second transfer, reusing the same handle, makes libcurl wrongly pass on the `Pro…

    curl curl curl curl Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2461202
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2461204
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2461205
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2476979
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2496766
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_80512.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-5545
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-5545
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-5545
  • article
    https://curl.se/docs/CVE-2026-5545.html
  • report
    https://access.redhat.com/security/cve/CVE-2026-6253
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-6253
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-6253
  • article
    https://curl.se/docs/CVE-2026-6253.html
  • report
    https://access.redhat.com/security/cve/CVE-2026-6429
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-6429
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-6429
  • article
    https://curl.se/docs/CVE-2026-6429.html
  • report
    https://access.redhat.com/security/cve/CVE-2026-7168
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-7168
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-7168
  • article
    http://www.openwall.com/lists/oss-security/2026/04/29/14
  • article
    https://curl.se/docs/CVE-2026-7168.html
  • article
    https://curl.se/docs/CVE-2026-7168.json
  • article
    https://hackerone.com/reports/3697719
  • report
    https://access.redhat.com/security/cve/CVE-2026-10536
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-10536
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-10536
  • article
    https://curl.se/docs/CVE-2026-10536.html
  • article
    https://curl.se/docs/CVE-2026-10536.json
  • article
    https://hackerone.com/reports/3751697