| Name: | curl |
|---|---|
| Version: | 7.76.1 |
| Release: | 40.el9_8.5 |
| Architecture: | x86_64 |
| Group: | Unspecified |
| Size: | 684513 |
| License: | MIT |
| RPM: | curl-7.76.1-40.el9_8.5.x86_64.rpm |
| Source RPM: | curl-7.76.1-40.el9_8.5.src.rpm |
| Build Date: | Mon Aug 17 2026 |
| Build Host: | build-ol9-x86_64.oracle.com |
| Vendor: | Oracle America |
| URL: | https://curl.se/ |
| Summary: | A utility for getting files from remote servers (FTP, HTTP, and others) |
| Description: | curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies, user+password authentication (Basic, Digest, NTLM, Negotiate, kerberos...), file transfer resume, proxy tunneling and a busload of other useful tricks. |
- fix missing %patch macros for Patch46 and Patch47
- fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965) - fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783) - tests: disable flaky test 1206 on x86_64 (FTP PORT timeout under valgrind)
- tests: disable flaky tests 3000, 3001 on i686 (stunnel startup race)
- fix SSH host key mismatch on type difference (CVE-2026-9547) - fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286)
- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)
- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)
- http: fix crash in rate-limited upload (RHEL-131696)
- openssl: respect system crypto policy for TLS max version (RHEL-128914)
- rebuild for c9s (RHEL-125838)
- cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121659