Oracle Errata System
Oracle Linux
5.11
2026-10-13T18:09:39
ELSA-2026-80511: curl security update (MODERATE)
Oracle Linux 9
[7.76.1-40.el9_8.8]
- fix cookie injection via trailing dot super cookies (CVE-2026-8924)
- fix digest auth state leak on origin or credential change (CVE-2026-11856)
MODERATE
Copyright 2026 Oracle, Inc.
CVE-2026-11856
CVE-2026-8924
cpe:/a:oracle:linux:9::appstream
cpe:/o:oracle:linux:9:8:baseos_patch
cpe:/o:oracle:linux:9::baseos_latest
libcurl-devel
libcurl
oraclelinux-release
curl-minimal
libcurl-minimal
curl
bc4d06a08d8b756f
^9
aarch64
0:7.76.1-40.el9_8.8
x86_64