[CLSA-2026:1793447020] Fix of 6 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-31 11:43:54 UTC
Description:
* SECURITY UPDATE: credentials leak to HTTP proxy on 401 during CONNECT - debian/patches/CVE-2026-86414.patch: credentials leak to HTTP proxy on 401 during CONNECT - CVE-2026-86414 * SECURITY UPDATE: TFTP direction confusion - debian/patches/CVE-2026-92389.patch: TFTP direction confusion - CVE-2026-92389 * SECURITY UPDATE: FTP wildcard write callback mixup - debian/patches/CVE-2026-92388.patch: FTP wildcard write callback mixup - CVE-2026-92388 * SECURITY UPDATE: IMAP APPEND command injection with CRLF conversion - debian/patches/CVE-2026-87864.patch: IMAP APPEND command injection with CRLF conversion - CVE-2026-87864 * SECURITY UPDATE: stack overflow by recursion in curl_mime_free - debian/patches/CVE-2026-92391.patch: stack overflow by recursion in curl_mime_free - CVE-2026-92391 * SECURITY UPDATE: password leak in CURLINFO_EFFECTIVE_URL - debian/patches/CVE-2026-94266.patch: password leak in CURLINFO_EFFECTIVE_URL - CVE-2026-94266
CVEs fixed:
Updated packages:
  • curl_7.64.0-4+deb10u9+tuxcare.els8_amd64.deb
    sha:f6893e3981b6d4d98467f0a8899fc450136281d4
  • libcurl3-gnutls_7.64.0-4+deb10u9+tuxcare.els8_amd64.deb
    sha:4c22f4d300bdc0b47b3e3506541534e931f087a2
  • libcurl3-nss_7.64.0-4+deb10u9+tuxcare.els8_amd64.deb
    sha:fa1c0a26a8156ce11bb3695de68881e0f5b17ffd
  • libcurl4_7.64.0-4+deb10u9+tuxcare.els8_amd64.deb
    sha:84492fedd087ea82d6f6f31588923a41d18eb265
  • libcurl4-doc_7.64.0-4+deb10u9+tuxcare.els8_all.deb
    sha:1004bd60fc3624daaddad739da0859b9213988bc
  • libcurl4-gnutls-dev_7.64.0-4+deb10u9+tuxcare.els8_amd64.deb
    sha:3b3725d9983e1129fa4020fd88d44d88d01e4ecb
  • libcurl4-nss-dev_7.64.0-4+deb10u9+tuxcare.els8_amd64.deb
    sha:cc78602b5e136ac2f4787ae9c6881930c149b825
  • libcurl4-openssl-dev_7.64.0-4+deb10u9+tuxcare.els8_amd64.deb
    sha:fa48b216fd8433fc703b79c6e885c250ec058ed2
  • curl_7.64.0-4+deb10u9+tuxcare.els8_arm64.deb
    sha:2cf8ae05f53186b84b760d46922dbc9965bb4483
  • libcurl3-gnutls_7.64.0-4+deb10u9+tuxcare.els8_arm64.deb
    sha:5300eaf7b022778cee5e5aac1c794863bd3a19cf
  • libcurl3-nss_7.64.0-4+deb10u9+tuxcare.els8_arm64.deb
    sha:e28e3f691e4ef5088b8e703c738a4c672ad1cdc7
  • libcurl4_7.64.0-4+deb10u9+tuxcare.els8_arm64.deb
    sha:0c51b971dc123663fb241366b4968b45b164e90d
  • libcurl4-gnutls-dev_7.64.0-4+deb10u9+tuxcare.els8_arm64.deb
    sha:66764dbed04a60e2f9f876db9e4243d1684b2a69
  • libcurl4-nss-dev_7.64.0-4+deb10u9+tuxcare.els8_arm64.deb
    sha:bafdeb12559cd5d89543734bfd7810a368ae1d55
  • libcurl4-openssl-dev_7.64.0-4+deb10u9+tuxcare.els8_arm64.deb
    sha:82639b4d2da3ff8a06050bbff0514c3341d57850
  • curl_7.64.0-4+deb10u9+tuxcare.els8_armel.deb
    sha:9a078acb73297e7bfbb48279f25a100c77349eb8
  • libcurl3-gnutls_7.64.0-4+deb10u9+tuxcare.els8_armel.deb
    sha:59dc3500c50517cbf54421fb58da6158efa7b53e
  • libcurl3-nss_7.64.0-4+deb10u9+tuxcare.els8_armel.deb
    sha:d892de4031648205c67b2eac5881df35c7c7a681
  • libcurl4_7.64.0-4+deb10u9+tuxcare.els8_armel.deb
    sha:b4aa532516ea11bfbf1d8445e9f0b0338450a69b
  • libcurl4-gnutls-dev_7.64.0-4+deb10u9+tuxcare.els8_armel.deb
    sha:6acabf747bf9dee17a8672173387d4a15b5216ed
  • libcurl4-nss-dev_7.64.0-4+deb10u9+tuxcare.els8_armel.deb
    sha:07b65a0fabcd9bd763d320d5a8b792a09691609f
  • libcurl4-openssl-dev_7.64.0-4+deb10u9+tuxcare.els8_armel.deb
    sha:35407b0b9197a77655b7d7a694b846a8879362f0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.