{"id":"CLSA-2026-1786091577","summary":"curl: Fix of 2 CVEs","details":"- CVE-2026-8458: tie the requested SASL/SPNEGO service name to the connection\n  and compare it when matching an existing connection for reuse, so a\n  Negotiate authenticated connection is not reused for a transfer that asked\n  for a different service\n- CVE-2026-8926: discard a .netrc entry that matches the host but whose login\n  does not match the user given in the URL, so the password that belongs to\n  another user of that host is no longer returned as a successful lookup","modified":"2026-10-26T09:31:26.295461332Z","published":"2026-08-07T08:33:07Z","upstream":["CVE-2026-8458","CVE-2026-8926"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1786091577.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8458"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8926"}],"affected":[{"package":{"name":"curl","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/curl?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_6.1.tuxcare.els18"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786091577.json"}},{"package":{"name":"curl-minimal","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/curl-minimal?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_6.1.tuxcare.els18"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786091577.json"}},{"package":{"name":"libcurl","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/libcurl?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_6.1.tuxcare.els18"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786091577.json"}},{"package":{"name":"libcurl-devel","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/libcurl-devel?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_6.1.tuxcare.els18"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786091577.json"}},{"package":{"name":"libcurl-minimal","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/libcurl-minimal?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_6.1.tuxcare.els18"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786091577.json"}}],"schema_version":"1.9.0"}