Release Info

Advisory: CLSA-2026:1771501223

OS: AlmaLinux 9.2 ESU

Public date: 2026-02-19 11:40:28.105214

Project: curl

Version: 7.76.1-31.el9_2.1.tuxcare.els4

Errata link: https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1771501223.html

Changelog

- CVE-2025-15079: fix accepting hosts not present in the specified known_hosts during SSH-based SCP/SFTP transfers when global known_hosts contained them restrict host verification to the specified known_hosts file

Update

Update command: dnf update curl*

Packages list

curl-7.76.1-31.el9_2.1.tuxcare.els4.x86_64.rpm curl-minimal-7.76.1-31.el9_2.1.tuxcare.els4.x86_64.rpm libcurl-7.76.1-31.el9_2.1.tuxcare.els4.i686.rpm libcurl-7.76.1-31.el9_2.1.tuxcare.els4.x86_64.rpm libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els4.i686.rpm libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els4.x86_64.rpm libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els4.i686.rpm libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els4.x86_64.rpm

CVEs

CVE-2025-15079