| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: libcurl | Distribution: CentOS |
| Version: 8.12.1 | Vendor: CentOS |
| Release: 7.el10 | Build date: Sun Oct 11 14:28:53 2026 |
| Group: Unspecified | Build host: ppc64le-07.stream.rdu2.redhat.com |
| Size: 1075478 | Source RPM: curl-8.12.1-7.el10.src.rpm |
| Packager: builder@centos.org | |
| Url: https://curl.se/ | |
| Summary: A library for getting files from web servers | |
libcurl is a free and easy-to-use client-side URL transfer library, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3 and RTSP. libcurl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies, user+password authentication (Basic, Digest, NTLM, Negotiate, Kerberos4), file transfer resume, http proxy tunneling and more.
curl
* Thu Oct 08 2026 Jacek Migacz <jmigacz@redhat.com> - 8.12.1-7
- http: clear the stale credentials when personal data changes (CVE-2025-14819)
- vssh: fix SSH host key mismatch on type difference (CVE-2026-9547)
- tool_operate: fix schemeless URL handling with --proto-default (CVE-2026-12064)
- url: reject TLS-to-cleartext STARTTLS connection reuse (CVE-2026-8286)
- url: fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
- http: only send bearer if auth is allowed (CVE-2026-3783)
- proxy-auth: check proxy credentials on connection reuse (CVE-2026-3784)
- url: detect proxy changes read from environment (CVE-2026-8927)
- url: check service name in connection reuse (CVE-2026-8458)
- tls: fix incomplete mTLS config in conn reuse and session cache (CVE-2026-8932)
- setopt: clear proxy auth properly on NULL (CVE-2026-9079)
- cookie: trim trailing dots when checking PSL (CVE-2026-8924)
- digest: flush state on origin or credential change (CVE-2026-11856)
- netrc: reject password for non-matching login (CVE-2026-8926)
- http2: remove stream dependency tracking (CVE-2026-10536)
- url: check negotiate state on connection reuse (CVE-2026-5545)
- setopt: clear proxy auth properties when switching (CVE-2026-7168)
- http: clear proxy credentials on port or scheme change (CVE-2026-6253)
- http: clear credentials better on redirect (CVE-2026-6429)
* Mon May 18 2026 Jacek Migacz <jmigacz@redhat.com> - 8.12.1-6
- use tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
* Mon Dec 15 2025 Jacek Migacz <jmigacz@redhat.com> - 8.12.1-5
- openssl: fix channel binding for ML-DSA and PQC certificates (RHEL-150993)
* Mon Nov 17 2025 Jacek Migacz <jmigacz@redhat.com> - 8.12.1-4
- openssl: respect system crypto policy for TLS max version (RHEL-128916)
* Mon Oct 20 2025 Jacek Migacz <jmigacz@redhat.com> - 8.12.1-3
- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
Resolves: RHEL-121672
* Tue Apr 15 2025 Jacek Migacz <jmigacz@redhat.com> - 8.12.1-2
- revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
(temporary revert to workaround another issue RHEL-85608)
* Wed Mar 19 2025 Jacek Migacz <jmigacz@redhat.com> - 8.12.1-1
- new upstream release (RHEL-84132)
* Tue Nov 05 2024 Jacek Migacz <jmigacz@redhat.com> - 8.9.1-6
- use tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 8.9.1-5
- Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018
/usr/lib/.build-id /usr/lib/.build-id/5d /usr/lib/.build-id/5d/fc77544c64284204a779b45973c4c2cbe4fdef /usr/lib64/libcurl.so.4 /usr/lib64/libcurl.so.4.8.0 /usr/share/licenses/libcurl /usr/share/licenses/libcurl/COPYING
Generated by rpm2html 1.8.1
Fabrice Bellet, Thu Oct 22 08:09:50 2026