RHEL 10 : curl (RHSA-2026:69125)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69125 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including...

curl: CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL

A .netrc-sourced password, injected into the live URL handle at login time, survives an ordinary same-host relative Location: redirect and ends up verbatim in data-state.url, so it is exposed via CURLINFOEFFECTIVEURL, curl -w '%urleffective', and verbose -v output. Affected code...

curl: Windows filename sanitizer misses Unicode COM/LPT reserved device names

Hi all, I found a way for a server-selected Windows filename to bypass curl's reserved DOS device-name sanitizer. With curl -O -J, a Content-Disposition filename such as COM¹, COM², COM³, LPT¹, LPT², or LPT³ is left unchanged, even though Windows treats all six as reserved device names. Curl...

CLEANSTART-2026-CR32311 Security fix for CVE-2026-24515 applied in: apache-zookeeper 3.7.2-r4, cloudnative-pg-fips 1.24.4-r1, cloudnative-pg-fips 1.25.4-r1, curl 8.16.0-r0, curl 8.17.0-r0, curl 8.18.0-r0, druid-exporter-fips 0.10-r2, druid-exporter-fips 0.11-r3, druid-exporter-fips 0.8-r1, druid-exporter-fips 0.9-r1, expat 2.7.2-r0, minio-operator-fips 5.0.18-r6, opentofu-fips 1.7.10-r1, opentofu-fips 1.8.11-r1, tomcat11 11.0.18-r0

CVE-2026-24515 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CU80287 Security fix for CVE-2014-0139 applied in: curl 7.36.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JW10713 Security fix for CVE-2014-0138 applied in: curl 7.36.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JM41545 Security fix for CVE-2016-5421 applied in: curl 7.50.1-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UL86016 Security fix for CVE-2016-5420 applied in: curl 7.50.1-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-DO77426 Security fix for CVE-2016-5419 applied in: curl 7.50.1-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RA92052 Security fix for CVE-2016-7141 applied in: curl 7.50.2-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-IQ08712 Security fix for CVE-2016-7167 applied in: curl 7.50.3-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-DY91015 Security fix for CVE-2016-8625 applied in: curl 7.51.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RX12928 Security fix for CVE-2016-8624 applied in: curl 7.51.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HY33416 Security fix for CVE-2016-8623 applied in: curl 7.51.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XZ19364 Security fix for CVE-2016-8622 applied in: curl 7.51.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ER53347 Security fix for CVE-2016-8620 applied in: curl 7.51.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GY15629 Security fix for CVE-2016-8621 applied in: curl 7.51.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QM83661 Security fix for CVE-2016-8619 applied in: curl 7.51.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JY24927 Security fix for CVE-2016-8617 applied in: curl 7.51.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KM83938 Security fix for CVE-2016-8618 applied in: curl 7.51.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...