[CLSA-2026:1778175425] curl: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-05-07 17:37:11 UTC
Description:
- CVE-2016-8624: invalid URL parsing with '#' - CVE-2016-8623: use-after-free via shared cookies
Updated packages:
  • curl-7.19.7-59.el6.tuxcare.els15.x86_64.rpm
    sha:13ada002c6981e49b85bd283a43272d89e981eabba741cfa385c27daad03cf36
  • libcurl-7.19.7-59.el6.tuxcare.els15.i686.rpm
    sha:14097837816a55595eff7ef67191286ab3c8d81bf3b4d22e0a1687df8830bd41
  • libcurl-7.19.7-59.el6.tuxcare.els15.x86_64.rpm
    sha:875ab150080f714306da38fbc3155d988602794fc7c8d42e9acd622697e9d608
  • libcurl-devel-7.19.7-59.el6.tuxcare.els15.i686.rpm
    sha:4e73fd46e284ce1069ec7c836868ac222597db6425cafbbf3cf742d32aefab76
  • libcurl-devel-7.19.7-59.el6.tuxcare.els15.x86_64.rpm
    sha:9700a06a3bd24b07fd8ac35e57c6de780844222c515320d84ce96dbf3b405567
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.