Back Linuxsecurity

Fedora 43 curl Update 2026

Linuxsecurity •LinuxSecurity Advisories • September 11, 2026

Share: View original

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

curl is a command line tool for transferring data with URL syntax, supporting

FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMAP,

SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP

uploading, HTTP form based upload, proxies, cookies, user+password

authentication (Basic, Digest, NTLM, Negotiate, kerberos...), file transfer

resume, proxy tunneling and a busload of other useful tricks.

fix HTTP/2 stream-dependency tree UAF (CVE-2026-10536) fix stale proxy password leak (CVE-2026-9079) fix wrong reuse for different services (CVE-2026-8458)

* Tue Sep 8 2026 Jan Macku - 8.15.0-10 - fix HTTP/2 stream-dependency tree UAF (CVE-2026-10536) - fix stale proxy password leak (CVE-2026-9079) - fix wrong reuse for different services (CVE-2026-8458)

[ 1 ] Bug #2507892 - CVE-2026-10536 curl: libcurl: Use-after-free vulnerability leading to Denial of Service [fedora-all] [ 2 ] Bug #2509775 - CVE-2026-9079 curl: libcurl: Information disclosure due to failure to clear proxy authentication credentials [fedora-all] [ 3 ] Bug #2511432 - CVE-2026-8458 curl: libcurl: Unauthorized connection reuse due to a logical error [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-6841033933' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Curl Vulnerabilities in Fedora 44 and 43 Released On September 8, 2026, Fedora released updates addressing critical vulnerabilities in curl affecting versions 44 and 43. The vulnerabilities include a use-after-free issue (CVE-2026-10536), a proxy password leak (CVE-2026-9079), a certificate validation bypass (CVE-2026-11564), and unauthorized connection reuse (CVE-2026-8458). These vulnerabilities could potentially lead to denial of service and information disclosure. The affected systems are primarily Linux distributions utilizing curl for data transfer. Users are advised to apply the updates immediately using the 'dnf' update program. The vulnerabilities were published on July 3, 2026, and have been confirmed in both Fedora versions. The updates are crucial for maintaining system security and preventing potential exploitation. 2 sources 61

Extracted Entities

Fedora 43 curl Update 2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (3)

CWE Weaknesses (2)

Platforms (1)