{
  "cves": [
    "CVE-2026-11856",
    "CVE-2026-8458",
    "CVE-2026-8924",
    "CVE-2026-8926",
    "CVE-2026-8932",
    "CVE-2026-9079"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[8.12.1-4.6]\n- fix cookie injection via trailing dot super cookies (CVE-2026-8924)\n- fix digest auth state leak on origin or credential change (CVE-2026-11856)\n- fix netrc password lookup for non-matching login (CVE-2026-8926)\n\n[8.12.1-4.5]\n- fix proxy auth not cleared properly on NULL (CVE-2026-9079)\n- fix incomplete mTLS config in connection reuse and session cache\n  (CVE-2026-8932)\n- fix SASL service name connection reuse bypass (CVE-2026-8458)",
  "id": "ELSA-2026-69125",
  "ovalId": "oval:com.oracle.elsa:def:202669125",
  "source": "oracle_linux",
  "title": "ELSA-2026-69125:  curl security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-69125.html"
}