RHSA-2026:80511: CVEs fixed (Red Hat)

RHSA-2026:80511 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-8924 CRITICAL 9.1 UPGRADE A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set "super cookies" that bypass the Pu
• CVE-2026-11856 CRITICAL 9.8 UPGRADE Successfully using libcurl to do a transfer to a specific HTTP origin (`hostA`) with **Digest** authentication

Applies to

• RHEL 9 · fixed in curl-7.76.1-40.el9_8.8

← Back to latest CVEs