Advisory ROSA-SA-2026-3133

🗓️ 16 Feb 2026 07:07:06Reported by ROSA LABType

rosalinux

rosalinux🔗 abf.rosa.ru👁 6 Views

Curl vulnerability reads beyond memory buffers enabling remote denial of service; update Curl.

Reporter	Title	Published	Views	Family All 243
IBM Security Bulletins	Security Bulletin: Muliple security vulnerabilities found in IBM CICS TX Standard.	22 Apr 202614:23	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to a denial of service (CVE-2025-9086) due to cURL libcurl	10 Dec 202523:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in curl affects IBM Netezza Appliance	16 Apr 202610:57	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities found in the Red Hat Universal Minimal Base Image shipped with CICS Transaction Gateway for Multiplatforms	5 Mar 202613:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in curl affects IBM Netezza Appliance	16 Apr 202609:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	28 Jan 202615:42	–	ibm
IBM Security Bulletins	Security Bulletin: curl vulnerability	18 May 202620:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	9 Feb 202614:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	24 Mar 202606:56	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of HCL BigFix , IBM Cloud Pak System is affected by multiple vulnerabilities	25 Jun 202600:02	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
ROSA	any	noarch	curl	7.61.1	UNKNOWN

16 Feb 2026 07:07Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5

EPSS0.01301

SSVC

curl vulnerability memory overread remote denial rosa virtualization curl version 7.61.1 update curl