ELSA-2026-1350

ELSA-2026-1350 - curl security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-01-27

Description

[7.76.1-35.el9_7.3]
- http: fix crash in rate-limited upload (RHEL-129493)

[7.76.1-35.el9_7.2]
- openssl: respect system crypto policy for TLS max version (RHEL-128921)

[7.76.1-35.el9_7.1]
- rebuild for rhel-9.7.0 z-stream (RHEL-121659)

[7.76.1-35]
- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
Resolves: RHEL-121659

Related CVEs

CVE-2025-9086

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	curl-7.76.1-35.el9_7.3.src.rpm	9d828a03ef2763ef1f611f1184b15e722ca665a1659c8bbd2f94d4301aa0ae98	-	ol9_aarch64_appstream
	curl-7.76.1-35.el9_7.3.src.rpm	9d828a03ef2763ef1f611f1184b15e722ca665a1659c8bbd2f94d4301aa0ae98	-	ol9_aarch64_baseos_latest
	curl-7.76.1-35.el9_7.3.src.rpm	9d828a03ef2763ef1f611f1184b15e722ca665a1659c8bbd2f94d4301aa0ae98	-	ol9_aarch64_u7_baseos_patch
	curl-7.76.1-35.el9_7.3.aarch64.rpm	c4b55a320ecba9c0a22c051528925fbc81185ef3357ad8c39021fed30e61e95d	-	ol9_aarch64_baseos_latest
	curl-7.76.1-35.el9_7.3.aarch64.rpm	c4b55a320ecba9c0a22c051528925fbc81185ef3357ad8c39021fed30e61e95d	-	ol9_aarch64_u7_baseos_patch
	curl-minimal-7.76.1-35.el9_7.3.aarch64.rpm	29b204433066c599fdf54849e554d1177eb3e5ba55df68f178f8d348d8d5263c	-	ol9_aarch64_baseos_latest
	curl-minimal-7.76.1-35.el9_7.3.aarch64.rpm	29b204433066c599fdf54849e554d1177eb3e5ba55df68f178f8d348d8d5263c	-	ol9_aarch64_u7_baseos_patch
	libcurl-7.76.1-35.el9_7.3.aarch64.rpm	cce713e99321764886f1a63097c51d26482c6b0d56ab699cefe10b24ff7dc263	-	ol9_aarch64_baseos_latest
	libcurl-7.76.1-35.el9_7.3.aarch64.rpm	cce713e99321764886f1a63097c51d26482c6b0d56ab699cefe10b24ff7dc263	-	ol9_aarch64_u7_baseos_patch
	libcurl-devel-7.76.1-35.el9_7.3.aarch64.rpm	0140626dae37965f8176d2b3ed133917216672f30a375f45d25e97ee9abef162	-	ol9_aarch64_appstream
	libcurl-minimal-7.76.1-35.el9_7.3.aarch64.rpm	da168d35d076db9008f253bb24c3a1e886fa6281906ebd355eca7dca4cf06ee3	-	ol9_aarch64_baseos_latest
	libcurl-minimal-7.76.1-35.el9_7.3.aarch64.rpm	da168d35d076db9008f253bb24c3a1e886fa6281906ebd355eca7dca4cf06ee3	-	ol9_aarch64_u7_baseos_patch
Oracle Linux 9 (x86_64)	curl-7.76.1-35.el9_7.3.src.rpm	9d828a03ef2763ef1f611f1184b15e722ca665a1659c8bbd2f94d4301aa0ae98	-	ol9_x86_64_appstream
	curl-7.76.1-35.el9_7.3.src.rpm	9d828a03ef2763ef1f611f1184b15e722ca665a1659c8bbd2f94d4301aa0ae98	-	ol9_x86_64_baseos_latest
	curl-7.76.1-35.el9_7.3.src.rpm	9d828a03ef2763ef1f611f1184b15e722ca665a1659c8bbd2f94d4301aa0ae98	-	ol9_x86_64_u7_baseos_patch
	curl-7.76.1-35.el9_7.3.x86_64.rpm	b486b66287dd458f07fddcc36b8653f3e73dad065f59fbea1daa14518e089297	-	ol9_x86_64_baseos_latest
	curl-7.76.1-35.el9_7.3.x86_64.rpm	b486b66287dd458f07fddcc36b8653f3e73dad065f59fbea1daa14518e089297	-	ol9_x86_64_u7_baseos_patch
	curl-minimal-7.76.1-35.el9_7.3.x86_64.rpm	c5667c9e756e591e815373fb9a4d7a078572b8a8c2b6b1cc91c5adafffcaea8c	-	ol9_x86_64_baseos_latest
	curl-minimal-7.76.1-35.el9_7.3.x86_64.rpm	c5667c9e756e591e815373fb9a4d7a078572b8a8c2b6b1cc91c5adafffcaea8c	-	ol9_x86_64_u7_baseos_patch
	libcurl-7.76.1-35.el9_7.3.i686.rpm	cb420f07a06e07ba442d08bbb6b49f1634d93e176078ee8f32769bacc13f91fe	-	ol9_x86_64_baseos_latest
	libcurl-7.76.1-35.el9_7.3.i686.rpm	cb420f07a06e07ba442d08bbb6b49f1634d93e176078ee8f32769bacc13f91fe	-	ol9_x86_64_u7_baseos_patch
	libcurl-7.76.1-35.el9_7.3.x86_64.rpm	d2fef699381bfd08e4246aa10883cac65a4656761cebfbdb7763e77b51a15879	-	ol9_x86_64_baseos_latest
	libcurl-7.76.1-35.el9_7.3.x86_64.rpm	d2fef699381bfd08e4246aa10883cac65a4656761cebfbdb7763e77b51a15879	-	ol9_x86_64_u7_baseos_patch
	libcurl-devel-7.76.1-35.el9_7.3.i686.rpm	7a191c73cddb15737c2c0f92d3116b810bec9ab8fd6d41fc5ca2a490af0bd571	-	ol9_x86_64_appstream
	libcurl-devel-7.76.1-35.el9_7.3.x86_64.rpm	e6d2628a4d9a0a7d740cac7b1a4d9907ec6303d02b99342aa1b97d220ad73f26	-	ol9_x86_64_appstream
	libcurl-minimal-7.76.1-35.el9_7.3.i686.rpm	e6baf7aa51729d6057277b74e69db0879dbcd41a40e945742e2a051fb22f889d	-	ol9_x86_64_baseos_latest
	libcurl-minimal-7.76.1-35.el9_7.3.i686.rpm	e6baf7aa51729d6057277b74e69db0879dbcd41a40e945742e2a051fb22f889d	-	ol9_x86_64_u7_baseos_patch
	libcurl-minimal-7.76.1-35.el9_7.3.x86_64.rpm	e6312ba5acbac62852afa8da3db692b913c19662f73a14001879bd709f3ad4d0	-	ol9_x86_64_baseos_latest
	libcurl-minimal-7.76.1-35.el9_7.3.x86_64.rpm	e6312ba5acbac62852afa8da3db692b913c19662f73a14001879bd709f3ad4d0	-	ol9_x86_64_u7_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team