curl: libcurl cache updates follow symlinks and truncate their targets

Summary: When curl updates an HSTS, Alt-Svc, or cookie cache, it opens the supplied path with "w" before validating it, so a symlink path can truncate the file it targets. Root cause: Curlfopen calls curlxfopenfilename, "w" before checking the path or creating the safe temporary file, and fopen...

curl: Windows SSPI connection-pool probe can reuse a connection under the wrong user

Summary : A fresh transfer can reuse a keep-alive connection authenticated under another Windows user because the SSPI isolation check trusts a connection ID that a health probe can set. Root cause : Curlcpoolconnseemshealthy calls Curlattachconnection, which sets data-state.recentconnid, while...

curl: Fix of CVE-2026-8286

CVE-2026-8286: fix connection reuse for STARTTLS with mismatching TLS config...

CVE-2026-11856 affecting package curl for versions less than 8.11.1-11

CVE-2026-11856 affecting package curl for versions less than 8.11.1-11. A patched version of the package is available...

Security Bulletin:Vulnerability in curl affects IBM Netezza Appliance

Summary The curl package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-10536 Vulnerability Details CVEID:CVE-2026-10536 DESCRIPTION: A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree...

Photon OS 5.0: Curl PHSA-2026-5.0-90-0951

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0951. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

ROOT-OS-ALPINE-323-CVE-2026-8927 CVE-2026-8927 in curl - Patched by Root

Root has patched CVE-2026-8927 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-11856 CVE-2026-11856 in curl - Patched by Root

Root has patched CVE-2026-11856 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-8925 CVE-2026-8925 in curl - Patched by Root

Root has patched CVE-2026-8925 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-9545 CVE-2026-9545 in curl - Patched by Root

Root has patched CVE-2026-9545 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-9547 CVE-2026-9547 in curl - Patched by Root

Root has patched CVE-2026-9547 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-9080 CVE-2026-9080 in curl - Patched by Root

Root has patched CVE-2026-9080 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-8924 CVE-2026-8924 in curl - Patched by Root

Root has patched CVE-2026-8924 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-11564 CVE-2026-11564 in curl - Patched by Root

Root has patched CVE-2026-11564 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-12064 CVE-2026-12064 in curl - Patched by Root

Root has patched CVE-2026-12064 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-8286 CVE-2026-8286 in curl - Patched by Root

Root has patched CVE-2026-8286 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-8926 CVE-2026-8926 in curl - Patched by Root

Root has patched CVE-2026-8926 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-9079 CVE-2026-9079 in curl - Patched by Root

Root has patched CVE-2026-9079 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-11586 CVE-2026-11586 in curl - Patched by Root

Root has patched CVE-2026-11586 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

Photon OS 5.0: Curl PHSA-2023-5.0-91-0049

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0049. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...