ELSA-2026-80511

ELSA-2026-80511 - curl security update

Type:SECURITY
Impact:MODERATE
Release Date:2026-10-11

Description


[7.76.1-40.el9_8.8]
- fix cookie injection via trailing dot super cookies (CVE-2026-8924)
- fix digest auth state leak on origin or credential change (CVE-2026-11856)


Related CVEs


CVE-2026-11856
CVE-2026-8924

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) curl-7.76.1-40.el9_8.8.src.rpme998ab2f0f7906cc768bf1d7acf6b13d4adacff93ac58b59d7d7386d626ff2a4-ol9_aarch64_appstream
curl-7.76.1-40.el9_8.8.src.rpme998ab2f0f7906cc768bf1d7acf6b13d4adacff93ac58b59d7d7386d626ff2a4-ol9_aarch64_baseos_latest
curl-7.76.1-40.el9_8.8.src.rpme998ab2f0f7906cc768bf1d7acf6b13d4adacff93ac58b59d7d7386d626ff2a4-ol9_aarch64_u8_baseos_patch
curl-7.76.1-40.el9_8.8.aarch64.rpm43a67f4bcdda9157b0702e2e3e469b7de1fd77d381c27b735a7c01c53da0ea27-ol9_aarch64_baseos_latest
curl-7.76.1-40.el9_8.8.aarch64.rpm43a67f4bcdda9157b0702e2e3e469b7de1fd77d381c27b735a7c01c53da0ea27-ol9_aarch64_u8_baseos_patch
curl-minimal-7.76.1-40.el9_8.8.aarch64.rpm205521817374d3606821899b40a713ac9fa7afbc2d32a0a4b7b2729e39927c46-ol9_aarch64_baseos_latest
curl-minimal-7.76.1-40.el9_8.8.aarch64.rpm205521817374d3606821899b40a713ac9fa7afbc2d32a0a4b7b2729e39927c46-ol9_aarch64_u8_baseos_patch
libcurl-7.76.1-40.el9_8.8.aarch64.rpm787cca0e762932b29734ec94df0a53d61521e6cff8920563b70a28fc1406a127-ol9_aarch64_baseos_latest
libcurl-7.76.1-40.el9_8.8.aarch64.rpm787cca0e762932b29734ec94df0a53d61521e6cff8920563b70a28fc1406a127-ol9_aarch64_u8_baseos_patch
libcurl-devel-7.76.1-40.el9_8.8.aarch64.rpm79d72e5cfa303ff6e9957015fcd383f7aae500a22f3157c799da16e03e227ac3-ol9_aarch64_appstream
libcurl-minimal-7.76.1-40.el9_8.8.aarch64.rpm856e04941b33f3f3a25a954542add52f09187a307a4a6f82cf8801785dd9105a-ol9_aarch64_baseos_latest
libcurl-minimal-7.76.1-40.el9_8.8.aarch64.rpm856e04941b33f3f3a25a954542add52f09187a307a4a6f82cf8801785dd9105a-ol9_aarch64_u8_baseos_patch
Oracle Linux 9 (x86_64) curl-7.76.1-40.el9_8.8.src.rpme998ab2f0f7906cc768bf1d7acf6b13d4adacff93ac58b59d7d7386d626ff2a4-ol9_x86_64_appstream
curl-7.76.1-40.el9_8.8.src.rpme998ab2f0f7906cc768bf1d7acf6b13d4adacff93ac58b59d7d7386d626ff2a4-ol9_x86_64_baseos_latest
curl-7.76.1-40.el9_8.8.src.rpme998ab2f0f7906cc768bf1d7acf6b13d4adacff93ac58b59d7d7386d626ff2a4-ol9_x86_64_u8_baseos_patch
curl-7.76.1-40.el9_8.8.x86_64.rpmfcbe9c43554894ddf274d8808e2efda5155356e193a3a618bafa268d60b9d04a-ol9_x86_64_baseos_latest
curl-7.76.1-40.el9_8.8.x86_64.rpmfcbe9c43554894ddf274d8808e2efda5155356e193a3a618bafa268d60b9d04a-ol9_x86_64_u8_baseos_patch
curl-minimal-7.76.1-40.el9_8.8.x86_64.rpm95c4bd5998aa7125026712314c1ee064a80494aa2605ab54dc519ab307ba481e-ol9_x86_64_baseos_latest
curl-minimal-7.76.1-40.el9_8.8.x86_64.rpm95c4bd5998aa7125026712314c1ee064a80494aa2605ab54dc519ab307ba481e-ol9_x86_64_u8_baseos_patch
libcurl-7.76.1-40.el9_8.8.i686.rpm5601690a394a9c4d3b01ed2bf850b29bee08ea0d8ed5259de0e746f5b1612cf2-ol9_x86_64_baseos_latest
libcurl-7.76.1-40.el9_8.8.i686.rpm5601690a394a9c4d3b01ed2bf850b29bee08ea0d8ed5259de0e746f5b1612cf2-ol9_x86_64_u8_baseos_patch
libcurl-7.76.1-40.el9_8.8.x86_64.rpm74b8b8a7e91b26d6b3f3964e3f70bc21c49373df6b12603ac5dbd53dbc5aa6f9-ol9_x86_64_baseos_latest
libcurl-7.76.1-40.el9_8.8.x86_64.rpm74b8b8a7e91b26d6b3f3964e3f70bc21c49373df6b12603ac5dbd53dbc5aa6f9-ol9_x86_64_u8_baseos_patch
libcurl-devel-7.76.1-40.el9_8.8.i686.rpmd9d139700be46b110cf311a13250b7e8106299ae6e39aabd6e6c519f5c9aab25-ol9_x86_64_appstream
libcurl-devel-7.76.1-40.el9_8.8.x86_64.rpm8a6c1d7dc02b844168076c7da7d92d786849ed1a673bae3781c71b47f0a6e3d6-ol9_x86_64_appstream
libcurl-minimal-7.76.1-40.el9_8.8.i686.rpm7ec1fdedcc0beb273f913dc7d4c8a1ef76253e642dba50b38bf657b3cfe07a12-ol9_x86_64_baseos_latest
libcurl-minimal-7.76.1-40.el9_8.8.i686.rpm7ec1fdedcc0beb273f913dc7d4c8a1ef76253e642dba50b38bf657b3cfe07a12-ol9_x86_64_u8_baseos_patch
libcurl-minimal-7.76.1-40.el9_8.8.x86_64.rpm464f1f29a4076d49a0c9d77f099e4e115ea08f86a1562af2f3c045bf7f03f37e-ol9_x86_64_baseos_latest
libcurl-minimal-7.76.1-40.el9_8.8.x86_64.rpm464f1f29a4076d49a0c9d77f099e4e115ea08f86a1562af2f3c045bf7f03f37e-ol9_x86_64_u8_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete