{"id":"CLSA-2026-1774366368","summary":"curl: Fix of 3 CVEs","details":"- CVE-2026-1965: fix incorrect connection reuse; prevent reuse of Negotiate-\n  authenticated connections with different credentials and require\n  authentication identity match\n- CVE-2026-3784: fix wrong proxy connection reuse with different credentials;\n  check proxy user/password in proxy_info_matches to prevent reuse of HTTP\n  proxy CONNECT connections when credentials differ\n- CVE-2026-3783: prevent bearer token leak on HTTP(S) redirect when .netrc\n  contains entries for the redirected host","modified":"2026-05-27T11:36:08.187440197Z","published":"2026-03-24T15:32:53Z","upstream":["CVE-2026-1965","CVE-2026-3783","CVE-2026-3784"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1774366368.html"}],"affected":[{"package":{"name":"curl","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/curl?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-34.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1774366368.json"}},{"package":{"name":"curl-minimal","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/curl-minimal?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-34.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1774366368.json"}},{"package":{"name":"libcurl","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/libcurl?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-34.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1774366368.json"}},{"package":{"name":"libcurl-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/libcurl-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-34.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1774366368.json"}},{"package":{"name":"libcurl-minimal","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/libcurl-minimal?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-34.el8.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1774366368.json"}}],"schema_version":"1.7.5"}