RHSA-2026:82895HighCVSS 8.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
October 14, 2026
Last Modified
October 29, 2026

🔗 CVE IDs covered (26)

CVE-2026-92390 →CVE-2026-92391 →CVE-2026-92392 →CVE-2026-94265 →CVE-2025-14819 →CVE-2026-86409 →CVE-2026-86411 →CVE-2026-86414 →CVE-2026-92386 →CVE-2026-107928 →CVE-2026-107929 →CVE-2025-9086 →CVE-2026-92387 →CVE-2026-94266 →CVE-2026-87865 →CVE-2026-86412 →CVE-2026-86413 →CVE-2026-87861 →CVE-2026-87864 →CVE-2026-87866 →CVE-2026-92388 →CVE-2026-92389 →CVE-2025-14017 →CVE-2026-86410 →CVE-2026-87862 →CVE-2026-87863 →

📋 Description

CVE-2025-9086 — curl: libcurl: Curl out of bounds read for cookie path CVE-2025-14017 — curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers CVE-2025-14819 — curl: libcurl: Improper certificate validation due to cached TLS settings reuse CVE-2026-86409 — curl: curl: stale SigV4 headers sent unintended CVE-2026-86410 — curl: curl: redirect to SFTP or SCP bypasses host verification CVE-2026-86411 — curl: curl: FTP connection reuse inherits client-certificate CVE-2026-86412 — curl: curl: server-set cookie erases cookie jar CVE-2026-86413 — curl: curl: Negotiate credentials sent to redirected origin CVE-2026-86414 — curl: curl: leaking host credentials to HTTP proxy CVE-2026-87861 — curl: curl: cross-origin reuse of a Negotiate connection CVE-2026-87862 — curl: curl: HSTS cache import drops longer-lived child CVE-2026-87863 — curl: curl: Hsts Response Erases Persisted Entries CVE-2026-87864 — curl: IMAP APPEND plus CRLF conversion command injection CVE-2026-87865 — curl: curl: knownhost callback mismatches key as missing CVE-2026-87866 — curl: curl: wolfSSL public-key pinning bypass CVE-2026-92386 — curl: curl: server-set cookie aborts cookie jar load CVE-2026-92387 — curl: curl: never-ending loop via server response omission CVE-2026-92388 — curl: curl: FTP wildcard write callback mixup CVE-2026-92389 — curl: curl: TFTP direction confusion CVE-2026-92390 — curl: curl: -J no-clobber guarantee bypassed with 103 early hints CVE-2026-92391 — curl: curl: curl_mime_free stack overflow by recursion CVE-2026-92392 — curl: curl: HTTP/2 upload Use-After-Free CVE-2026-94265 — curl: curl: Authorization: Negotiate sent to foreign origin CVE-2026-94266 — curl: curl: password leak in CURLINFO_EFFECTIVE_URL CVE-2026-107928 — curl: curl: info leak uploading over WebSockets with GnuTLS CVE-2026-107929 — curl: curl: local interface connection reuse mixup

🎯 Affected products14

  • Red Hat Hardened Images
  • curl-0:8.23.0-0.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • curl-0:8.23.0-0.1.hum1@s390x as a component of Red Hat Hardened Images
  • curl-0:8.23.0-0.1.hum1@src as a component of Red Hat Hardened Images
  • curl-0:8.23.0-0.1.hum1@x86_64 as a component of Red Hat Hardened Images
  • libcurl-0:8.23.0-0.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • libcurl-0:8.23.0-0.1.hum1@s390x as a component of Red Hat Hardened Images
  • libcurl-0:8.23.0-0.1.hum1@x86_64 as a component of Red Hat Hardened Images
  • libcurl-devel-0:8.23.0-0.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • libcurl-devel-0:8.23.0-0.1.hum1@s390x as a component of Red Hat Hardened Images
  • libcurl-devel-0:8.23.0-0.1.hum1@x86_64 as a component of Red Hat Hardened Images
  • libcurl-minimal-0:8.23.0-0.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • libcurl-minimal-0:8.23.0-0.1.hum1@s390x as a component of Red Hat Hardened Images
  • libcurl-minimal-0:8.23.0-0.1.hum1@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Disable HTTP/2 in curl. For the curl CLI, use the `--http1.1` flag. For applications using libcurl, set `CURLOPT_HTTP_VERSION` to `CURL_HTTP_VERSION_1_1`. This vulnerability is only exploitable over HTTP/2 connections; HTTP/1.1 connections are not affected. Note that applications which depend on HTTP/2-specific features, such as gRPC, will not function with this workaround.

🔗 References (30)