ELSA-2026-57462

ELSA-2026-57462 - curl security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-08-20

Description


[7.61.1-34.el8_10.13]
- fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286)

[7.61.1-34.el8_10.12]
- NTLM: use HTTP/1.0 instead of HTTP/1.1 for compatibility (RHEL-171912)


Related CVEs


CVE-2026-8286

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) curl-7.61.1-34.el8_10.13.src.rpme4a17f1b2cd056303f903ddb9208a282d9352acfd62c0750e27251e7c96e2cd3-ol8_aarch64_baseos_latest
curl-7.61.1-34.el8_10.13.src.rpme4a17f1b2cd056303f903ddb9208a282d9352acfd62c0750e27251e7c96e2cd3-ol8_aarch64_u10_baseos_patch
curl-7.61.1-34.el8_10.13.aarch64.rpmb88bc80d99bd178507c133d422fe59b7444cf144ca674c5eadae96344090e1ee-ol8_aarch64_baseos_latest
curl-7.61.1-34.el8_10.13.aarch64.rpmb88bc80d99bd178507c133d422fe59b7444cf144ca674c5eadae96344090e1ee-ol8_aarch64_u10_baseos_patch
libcurl-7.61.1-34.el8_10.13.aarch64.rpma48c18d9dc082601f818046dba2f34e564f113395c3476a6852a53cc5819daad-ol8_aarch64_baseos_latest
libcurl-7.61.1-34.el8_10.13.aarch64.rpma48c18d9dc082601f818046dba2f34e564f113395c3476a6852a53cc5819daad-ol8_aarch64_u10_baseos_patch
libcurl-devel-7.61.1-34.el8_10.13.aarch64.rpm83ce2cff34bd4d11bc212a5810b542771a756a8f1fd031c7a74f2244c780ffc5-ol8_aarch64_baseos_latest
libcurl-devel-7.61.1-34.el8_10.13.aarch64.rpm83ce2cff34bd4d11bc212a5810b542771a756a8f1fd031c7a74f2244c780ffc5-ol8_aarch64_u10_baseos_patch
libcurl-minimal-7.61.1-34.el8_10.13.aarch64.rpm250a22171d7b365775f928bfc618df8857d77775f5c9cd4dcbcfbe0cfeb342d2-ol8_aarch64_baseos_latest
libcurl-minimal-7.61.1-34.el8_10.13.aarch64.rpm250a22171d7b365775f928bfc618df8857d77775f5c9cd4dcbcfbe0cfeb342d2-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) curl-7.61.1-34.el8_10.13.src.rpme4a17f1b2cd056303f903ddb9208a282d9352acfd62c0750e27251e7c96e2cd3-ol8_x86_64_baseos_latest
curl-7.61.1-34.el8_10.13.src.rpme4a17f1b2cd056303f903ddb9208a282d9352acfd62c0750e27251e7c96e2cd3-ol8_x86_64_u10_baseos_patch
curl-7.61.1-34.el8_10.13.x86_64.rpm58c7d86d9947e867d965b7f1cf17d6a47a235c8ba291fe7c279c103174f0cf42-ol8_x86_64_baseos_latest
curl-7.61.1-34.el8_10.13.x86_64.rpm58c7d86d9947e867d965b7f1cf17d6a47a235c8ba291fe7c279c103174f0cf42-ol8_x86_64_u10_baseos_patch
libcurl-7.61.1-34.el8_10.13.i686.rpmd22f58e987c6cf107c0018b839550e8ba5ec47ebbc5c1e59feb3171a380fc45f-ol8_x86_64_baseos_latest
libcurl-7.61.1-34.el8_10.13.i686.rpmd22f58e987c6cf107c0018b839550e8ba5ec47ebbc5c1e59feb3171a380fc45f-ol8_x86_64_u10_baseos_patch
libcurl-7.61.1-34.el8_10.13.x86_64.rpm6f8621542c9ca4c32ba992bad0b9a8c4edc1b021a003db54b4988e05bb0a0694-ol8_x86_64_baseos_latest
libcurl-7.61.1-34.el8_10.13.x86_64.rpm6f8621542c9ca4c32ba992bad0b9a8c4edc1b021a003db54b4988e05bb0a0694-ol8_x86_64_u10_baseos_patch
libcurl-devel-7.61.1-34.el8_10.13.i686.rpmf02e02766bbc34211703e2c3c593df93b6e33696c891a401e0fde10223b63a69-ol8_x86_64_baseos_latest
libcurl-devel-7.61.1-34.el8_10.13.i686.rpmf02e02766bbc34211703e2c3c593df93b6e33696c891a401e0fde10223b63a69-ol8_x86_64_u10_baseos_patch
libcurl-devel-7.61.1-34.el8_10.13.x86_64.rpm2641a1aae4249b29a62b29693c25d562efa49f9c24260fc93f5a5ec5cd9c8e2d-ol8_x86_64_baseos_latest
libcurl-devel-7.61.1-34.el8_10.13.x86_64.rpm2641a1aae4249b29a62b29693c25d562efa49f9c24260fc93f5a5ec5cd9c8e2d-ol8_x86_64_u10_baseos_patch
libcurl-minimal-7.61.1-34.el8_10.13.i686.rpmcf660300bec97429fb76249942351f8f9ebaf2dfc49c363fb465f6b35cf719bd-ol8_x86_64_baseos_latest
libcurl-minimal-7.61.1-34.el8_10.13.i686.rpmcf660300bec97429fb76249942351f8f9ebaf2dfc49c363fb465f6b35cf719bd-ol8_x86_64_u10_baseos_patch
libcurl-minimal-7.61.1-34.el8_10.13.x86_64.rpm5a3d5bf31e3257a976be3824a492f9346acca36cfe4171240d00ff1e9d0bbee3-ol8_x86_64_baseos_latest
libcurl-minimal-7.61.1-34.el8_10.13.x86_64.rpm5a3d5bf31e3257a976be3824a492f9346acca36cfe4171240d00ff1e9d0bbee3-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete