OESA-2026-1190 curl security update

cURL is a computer software project providing a library libcurl and command-line tool curl for transferring data using various protocols. Security Fixes: When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality and integrity of protected information

The multiple vulnerabilities of the pamsshagentauth-0.9.3 package for the Red Hat Enterprise Linux operating system may lead to violations of confidentiality and integrity of protected information. These vulnerabilities can be exploited remotely...

pam_ssh_agent_auth: symbol crash leading to glibc error() called incorrectly

A certain Red Hat build of the pamsshagentauth module on Red Hat Enterprise Linux RHEL 6 and Fedora Rawhide calls the glibc error function instead of the error function in the OpenSSH codebase, which allows local users to obtain sensitive information from process memory or possibly gain privilege...