{"cves":["CVE-2026-11856","CVE-2026-8458","CVE-2026-8924","CVE-2026-8926","CVE-2026-8932","CVE-2026-9079"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[8.12.1-4.6]\n- fix cookie injection via trailing dot super cookies (CVE-2026-8924)\n- fix digest auth state leak on origin or credential change (CVE-2026-11856)\n- fix netrc password lookup for non-matching login (CVE-2026-8926)\n\n[8.12.1-4.5]\n- fix proxy auth not cleared properly on NULL (CVE-2026-9079)\n- fix incomplete mTLS config in connection reuse and session cache\n  (CVE-2026-8932)\n- fix SASL service name connection reuse bypass (CVE-2026-8458)","id":"ELSA-2026-69125","ovalId":"oval:com.oracle.elsa:def:202669125","source":"oracle_linux","title":"ELSA-2026-69125:  curl security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-69125.html"}