curl security update

An update is available for curl. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The curl packages provide the libcurl library and the curl utility for...

RLSA-2026:96092 Important: curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: curl: HTTP/2 upload Use-After-Free CVE-2026-92392 For more details about the security issues, including the impact, a...

Important: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

ALSA-2026:96092 Important: curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: curl: HTTP/2 upload Use-After-Free CVE-2026-92392 For more details about the security issues, including the impact, a...

RHEL 10 : curl (RHSA-2026:96092)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:96092 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP,...

Oracle Linux 10 : curl (ELSA-2026-96092)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-96092 advisory. 8.12.1-4.el102.8 - fix HTTP/2 upload use-after-free in multidone CVE-2026-92392 Tenable has extracted the preceding description block directly from the Oracle...

curl/libcurl 8.22.0 HTTP/2 Upload Use-After-Free

curl/libcurl versions 8.12.0 through 8.22.0 contain an HTTP/2 upload use-after-free when processing RSTSTREAM frames. The supplied proof of concept provides local assessment and an opt-in loopback protocol probe. https://packetstorm.news/download/235856...