[CLSA-2026:1790871595] curl: Fix of CVE-2026-18924
Type:
security
Severity:
Important
Release date:
2026-10-01 16:20:07 UTC
Description:
- CVE-2026-18924: link HTTP/2 server-push transfers to the parent handle's share in duphandle() so the pushed handle does not outlive shared state
CVEs fixed:
Updated packages:
  • curl-7.76.1-40.el9_8.7.tuxcare.els4.aarch64.rpm
    sha:0d43e8ad845cf87c7ca98d232688a5d71b0f1c2c85ee09ce923aff13ee2d2ed1
  • curl-7.76.1-40.el9_8.7.tuxcare.els4.i686.rpm
    sha:1087190818b60783e50c43f86696556d3f995f22951fbcd0a2375bd8bfe5c39d
  • curl-7.76.1-40.el9_8.7.tuxcare.els4.x86_64.rpm
    sha:e7f8934de0824ad7e20e849d2c1f1e167c1655c29678ab87ddccf5db33c2f85d
  • curl-minimal-7.76.1-40.el9_8.7.tuxcare.els4.aarch64.rpm
    sha:b00d70aa233c2870197876643fe5c0c9702f00e34cc047f43e016de99c2dc051
  • curl-minimal-7.76.1-40.el9_8.7.tuxcare.els4.i686.rpm
    sha:f770ef22590250a678e6663e3d32ca9075df4a560e566b12da756c0829cf67f2
  • curl-minimal-7.76.1-40.el9_8.7.tuxcare.els4.x86_64.rpm
    sha:79a8868121b94358ca75ed897754ec46c1d2353f372a38b9b73be8fd88b94331
  • libcurl-7.76.1-40.el9_8.7.tuxcare.els4.aarch64.rpm
    sha:fdadebcfea389c5fbb750a85ce32156054a524207f4880a962cdd93ec8d40ae1
  • libcurl-7.76.1-40.el9_8.7.tuxcare.els4.i686.rpm
    sha:e1d1b4ff27469f32ef5893a57dead51c778acf4aef218ead01d85f6ab76cab45
  • libcurl-7.76.1-40.el9_8.7.tuxcare.els4.x86_64.rpm
    sha:baf0917be3ec6980017376db3e4fa6ca6f3907e1437b72380457ca434e90f5f9
  • libcurl-devel-7.76.1-40.el9_8.7.tuxcare.els4.aarch64.rpm
    sha:5707bf1b3e90c55dd963a73c79934abc6669560760a385abdf25cfa6f6bdbd91
  • libcurl-devel-7.76.1-40.el9_8.7.tuxcare.els4.i686.rpm
    sha:5a35c812e32e717dbbbeaaf29d1c8ad9c8200748501f2a96330e524db8418a52
  • libcurl-devel-7.76.1-40.el9_8.7.tuxcare.els4.x86_64.rpm
    sha:e05cc72afbdf96a9f5d02d635d684d5405e720c48da31f04fd3c44a6c66db943
  • libcurl-minimal-7.76.1-40.el9_8.7.tuxcare.els4.aarch64.rpm
    sha:876b65c974086051e33bc82b15ff6e4ee78363c477aa20d18ab78a352a7e5fab
  • libcurl-minimal-7.76.1-40.el9_8.7.tuxcare.els4.i686.rpm
    sha:3b59f3d748667d0f6fa6fa1e675fad77cb4c033b4f2d2181237b45f7c833dc0c
  • libcurl-minimal-7.76.1-40.el9_8.7.tuxcare.els4.x86_64.rpm
    sha:8d1a9c0cfd8dc0349e524e17824a452a2a004e380d8098d8ba3c9169e9961510
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.