elsa-2026-69125
oracle_linux
Description
[8.12.1-4.6] - fix cookie injection via trailing dot super cookies (CVE-2026-8924) - fix digest auth state leak on origin or credential change (CVE-2026-11856) - fix netrc password lookup for non-matching login (CVE-2026-8926) [8.12.1-4.5] - fix proxy auth not cleared properly on NULL (CVE-2026-9079) - fix incomplete mTLS config in connection reuse and session cache (CVE-2026-8932) - fix SASL service name connection reuse bypass (CVE-2026-8458)
Timeline
- Published
- unknown
- Last Modified
- unknown
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"cves": [
"CVE-2026-11856",
"CVE-2026-8458",
"CVE-2026-8924",
"CVE-2026-8926",
"CVE-2026-8932",
"CVE-2026-9079"
],
"cvss": 0.0,
"database_specific": {
"severity": "IMPORTANT"
},
"description": "[8.12.1-4.6]\n- fix cookie injection via trailing dot super cookies (CVE-2026-8924)\n- fix digest auth state leak on origin or credential change (CVE-2026-11856)\n- fix netrc password lookup for non-matching login (CVE-2026-8926)\n\n[8.12.1-4.5]\n- fix proxy auth not cleared properly on NULL (CVE-2026-9079)\n- fix incomplete mTLS config in connection reuse and session cache\n (CVE-2026-8932)\n- fix SASL service name connection reuse bypass (CVE-2026-8458)",
"id": "ELSA-2026-69125",
"ovalId": "oval:com.oracle.elsa:def:202669125",
"source": "oracle_linux",
"title": "ELSA-2026-69125: curl security update (IMPORTANT)",
"url": "https://linux.oracle.com/errata/ELSA-2026-69125.html"
}