Release Info

Advisory: CLSA-2026:1771501913

OS: TuxCare 9.6 ESU

Public date: 2026-02-19 11:51:56.245622

Project: curl

Version: 7.76.1-31.el9_6.1.tuxcare.els4

Errata link: https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1771501913.html

Changelog

- CVE-2025-15079: fix accepting hosts not present in the specified known_hosts during SSH-based SCP/SFTP transfers when global known_hosts contained them restrict host verification to the specified known_hosts file

Update

Update command: dnf update curl*

Packages list

curl-7.76.1-31.el9_6.1.tuxcare.els4.x86_64.rpm curl-minimal-7.76.1-31.el9_6.1.tuxcare.els4.x86_64.rpm libcurl-7.76.1-31.el9_6.1.tuxcare.els4.i686.rpm libcurl-7.76.1-31.el9_6.1.tuxcare.els4.x86_64.rpm libcurl-devel-7.76.1-31.el9_6.1.tuxcare.els4.i686.rpm libcurl-devel-7.76.1-31.el9_6.1.tuxcare.els4.x86_64.rpm libcurl-minimal-7.76.1-31.el9_6.1.tuxcare.els4.i686.rpm libcurl-minimal-7.76.1-31.el9_6.1.tuxcare.els4.x86_64.rpm

CVEs

CVE-2025-15079