| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: libcurl-minimal | Distribution: Koji Testing |
| Version: 8.12.1 | Vendor: Koji |
| Release: 8.el10 | Build date: Thu Oct 15 15:14:46 2026 |
| Group: Unspecified | Build host: 373a317156b2 |
| Size: 876366 | Source RPM: curl-8.12.1-8.el10.src.rpm |
| Packager: Koji | |
| Url: https://curl.se/ | |
| Summary: Conservatively configured build of libcurl for minimal installations | |
This is a replacement of the 'libcurl' package for minimal installations. It comes with a limited set of features compared to the 'libcurl' package. On the other hand, the package is smaller and requires fewer run-time dependencies to be installed.
curl
* Thu Oct 15 2026 Jacek Migacz <jmigacz@redhat.com> - 8.12.1-8
- multi: adjust the cleanup order in multi_done (CVE-2026-92392)
* Thu Oct 08 2026 Jacek Migacz <jmigacz@redhat.com> - 8.12.1-7
- http: clear the stale credentials when personal data changes (CVE-2025-14819)
- vssh: fix SSH host key mismatch on type difference (CVE-2026-9547)
- tool_operate: fix schemeless URL handling with --proto-default (CVE-2026-12064)
- url: reject TLS-to-cleartext STARTTLS connection reuse (CVE-2026-8286)
- url: fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
- http: only send bearer if auth is allowed (CVE-2026-3783)
- proxy-auth: check proxy credentials on connection reuse (CVE-2026-3784)
- url: detect proxy changes read from environment (CVE-2026-8927)
- url: check service name in connection reuse (CVE-2026-8458)
- tls: fix incomplete mTLS config in conn reuse and session cache (CVE-2026-8932)
- setopt: clear proxy auth properly on NULL (CVE-2026-9079)
- cookie: trim trailing dots when checking PSL (CVE-2026-8924)
- digest: flush state on origin or credential change (CVE-2026-11856)
- netrc: reject password for non-matching login (CVE-2026-8926)
- http2: remove stream dependency tracking (CVE-2026-10536)
- url: check negotiate state on connection reuse (CVE-2026-5545)
- setopt: clear proxy auth properties when switching (CVE-2026-7168)
- http: clear proxy credentials on port or scheme change (CVE-2026-6253)
- http: clear credentials better on redirect (CVE-2026-6429)
* Mon May 18 2026 Jacek Migacz <jmigacz@redhat.com> - 8.12.1-6
- use tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
* Mon Dec 15 2025 Jacek Migacz <jmigacz@redhat.com> - 8.12.1-5
- openssl: fix channel binding for ML-DSA and PQC certificates (RHEL-150993)
* Mon Nov 17 2025 Jacek Migacz <jmigacz@redhat.com> - 8.12.1-4
- openssl: respect system crypto policy for TLS max version (RHEL-128916)
* Mon Oct 20 2025 Jacek Migacz <jmigacz@redhat.com> - 8.12.1-3
- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
Resolves: RHEL-121672
* Tue Apr 15 2025 Jacek Migacz <jmigacz@redhat.com> - 8.12.1-2
- revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
(temporary revert to workaround another issue RHEL-85608)
* Wed Mar 19 2025 Jacek Migacz <jmigacz@redhat.com> - 8.12.1-1
- new upstream release (RHEL-84132)
* Tue Nov 05 2024 Jacek Migacz <jmigacz@redhat.com> - 8.9.1-6
- use tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 8.9.1-5
- Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018
/usr/lib/.build-id /usr/lib/.build-id/fd /usr/lib/.build-id/fd/e4eb3715b6e73aa9c7602add06351ebe8e636b /usr/lib64/libcurl.so.4 /usr/lib64/libcurl.so.4.8.0 /usr/share/licenses/libcurl-minimal /usr/share/licenses/libcurl-minimal/COPYING
Generated by rpm2html 1.8.1
Fabrice Bellet, Thu Oct 22 08:09:50 2026