Release curl-8.12.1-4.el10_2.3 ALSA-2026:55450
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 35/100
Research direction
Start from the issue body: it lists the curl/libcurl build version, architectures, and CVEs for the security update. Read the repository's release/update process before changing anything, because no files or tests are named here. Done means the curl-8.12.1-4.el10_2.3 update is released or tracked for all listed affected packages.
Written by the indexing model from the issue text.
Description
curl security update
Severity: Important
Description
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.
Security Fix(es):
- curl: libcurl: Improper certificate validation due to cached TLS settings reuse (CVE-2025-14819)
- curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication (CVE-2026-1965)
- curl: curl: Unauthorized access due to improper HTTP proxy connection reuse (CVE-2026-3784)
- curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect (CVE-2026-3783)
- curl: curl: Man-in-the-middle attack via SSH host key bypass (CVE-2026-9547)
- curl: curl: Insecure connection establishment due to TLS configuration mismatch (CVE-2026-8286)
- curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP (CVE-2026-12064)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected packages:
curl-8.12.1-4.el10_2.3.x86_64
libcurl-8.12.1-4.el10_2.3.x86_64
libcurl-devel-8.12.1-4.el10_2.3.x86_64
libcurl-minimal-8.12.1-4.el10_2.3.x86_64
curl-8.12.1-4.el10_2.3.s390x
libcurl-8.12.1-4.el10_2.3.s390x
libcurl-devel-8.12.1-4.el10_2.3.s390x
libcurl-minimal-8.12.1-4.el10_2.3.s390x
curl-8.12.1-4.el10_2.3.ppc64le
libcurl-8.12.1-4.el10_2.3.ppc64le
libcurl-devel-8.12.1-4.el10_2.3.ppc64le
libcurl-minimal-8.12.1-4.el10_2.3.ppc64le
curl-8.12.1-4.el10_2.3.aarch64
libcurl-8.12.1-4.el10_2.3.aarch64
libcurl-devel-8.12.1-4.el10_2.3.aarch64
libcurl-minimal-8.12.1-4.el10_2.3.aarch64
curl-8.12.1-4.el10_2.3.x86_64_v2
libcurl-8.12.1-4.el10_2.3.x86_64_v2
libcurl-devel-8.12.1-4.el10_2.3.x86_64_v2
libcurl-minimal-8.12.1-4.el10_2.3.x86_64_v2
- Dominant language
- No language data
- Stars
- 2
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from AlmaLinux/updates
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
-
Difficulty 1/5 Under an hour Newbie friendliness 85/100
-
Difficulty 1/5 Under an hour Newbie friendliness 60/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
-
Difficulty 5/5 Over a week Newbie friendliness 15/100
All issues in AlmaLinux/updates
Similar issues
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
Wetzel402/Skylite-UX#112 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 82/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
fwcd/tree-sitter-kotlin#289 ·
-
awaiting-response backend bug documentation P2 platform/linux qa
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
wildcard/caro#1501 · 2 comments ·
Maintainers usually reply within 4 days
-
documentation good first issue ready-for-triage ready-to-code
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
release-engineering/fbc-update-planner#102 · 3 comments ·
Maintainers usually reply within 5 days