Red Hat Product Errata RHBA-2025:17407 - Bug Fix Advisory
Issued:
2025-10-07
Updated:
2025-10-07

RHBA-2025:17407 - Bug Fix Advisory

Synopsis

curl bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for curl is now available for Red Hat Enterprise Linux 8.

Description

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Bug Fix(es) and Enhancement(s):

  • curl: Incomplete patch for host name wildcard checking [8.10.z] (JIRA:RHEL-5680)
  • "Bad file descriptor" error only in latest curl (JIRA:RHEL-85602)
  • curl --hostpubmd5 option does not work (JIRA:RHEL-94574)
  • Curl_ossl_md5sum() doesn't check for errors when computing the digest [rhel-8.10.z] (JIRA:RHEL-102601)
  • Fall back automagically to HTTP1.1 from HTTP2.0 when performing auth method (JIRA:RHEL-73788)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

  • RHEL-5680 - curl: Incomplete patch for host name wildcard checking [8.10.z]
  • RHEL-94574 - curl --hostpubmd5 option does not work

CVEs

(none)

References

(none)

Red Hat Enterprise Linux for x86_64 8

SRPM
curl-7.61.1-34.el8_10.8.src.rpm SHA-256: e55a19948468c7de635492deb76e07d1f29fa9531d7b74649c66de88b7a420ae
x86_64
curl-7.61.1-34.el8_10.8.x86_64.rpm SHA-256: 2e8751a666c3149494ef1f828cf8a62866c0e3dc1995d601d86626e4641a2b98
curl-debuginfo-7.61.1-34.el8_10.8.i686.rpm SHA-256: 04f5bb4ff125f868d740fce1a334d1085467fac0b593c1d6c0d997f59e0622b5
curl-debuginfo-7.61.1-34.el8_10.8.x86_64.rpm SHA-256: 3b489341414918df214924acb49cb3a7d8a2c04a67a7957e8504b5891d67a47f
curl-debugsource-7.61.1-34.el8_10.8.i686.rpm SHA-256: d006096e8d6847f2d87ed781cc95478aafb6266375c022df01684edb40c76b88
curl-debugsource-7.61.1-34.el8_10.8.x86_64.rpm SHA-256: 12cfcaf8e53dedab328aa503514023f7f441a11bdb8e8235e38be611e799c5e2
curl-minimal-debuginfo-7.61.1-34.el8_10.8.i686.rpm SHA-256: b152c2de3021e46f68175c74c747446083dceb78826fa6c9b755c6df9f2e23c8
curl-minimal-debuginfo-7.61.1-34.el8_10.8.x86_64.rpm SHA-256: ba76b178789cd3c3e27c0a40047f3ed8514391d74ebb6d71aef7e11d63a6bb70
libcurl-7.61.1-34.el8_10.8.i686.rpm SHA-256: 04540613b249b5812c1a78cd3224d773d0b87f0d0d421e65aa0dfe6c22cba23d
libcurl-7.61.1-34.el8_10.8.x86_64.rpm SHA-256: 21ad786a952e4125579cb1e31f0da01e43df8138923cd61d0eef1e068fd719ba
libcurl-debuginfo-7.61.1-34.el8_10.8.i686.rpm SHA-256: 035d1e24ad913b325b349a2035343162d6f987a1b73fa0a9c67c6393191012c8
libcurl-debuginfo-7.61.1-34.el8_10.8.x86_64.rpm SHA-256: 3e2b431c6efc7b85d6cb8c33228cb2c255ca02be345643f3548251f5f69174c8
libcurl-devel-7.61.1-34.el8_10.8.i686.rpm SHA-256: ef01056b55644f3cc4362461b1a9d8b4b437213ccbd886c3df032c2361f8283c
libcurl-devel-7.61.1-34.el8_10.8.x86_64.rpm SHA-256: 3eb9cc17e69ffad13e62ee289d5f41f2f9cc9441d5eae08a7a8ad7b6a99d435e
libcurl-minimal-7.61.1-34.el8_10.8.i686.rpm SHA-256: 795d747defc59d9e6bd5f83389099af36e3c7ce2b94d4ae1fdd328ab7be2dd9c
libcurl-minimal-7.61.1-34.el8_10.8.x86_64.rpm SHA-256: 99d0613d9ea09d8781d34cfed87ae31d3581eeb98ff7cbeb181ba2d0073d94bb
libcurl-minimal-debuginfo-7.61.1-34.el8_10.8.i686.rpm SHA-256: bedd863ea56649505cb0a1b96f1ebf7b66bfae573ab6bee4c671a9099027b31e
libcurl-minimal-debuginfo-7.61.1-34.el8_10.8.x86_64.rpm SHA-256: db27f6689c779e9fb63b939dbd9987587146f2d8b3a15957c2e083e23adcf12d

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
curl-7.61.1-34.el8_10.8.src.rpm SHA-256: e55a19948468c7de635492deb76e07d1f29fa9531d7b74649c66de88b7a420ae
s390x
curl-7.61.1-34.el8_10.8.s390x.rpm SHA-256: fd1ea869650a94a7a18bdbd48c4f8f7fb1ad53af5ef926d18383fb0475400a4d
curl-debuginfo-7.61.1-34.el8_10.8.s390x.rpm SHA-256: 19769b1277824ee0361ce481c70edd0ef646be4dc5699ed6f557b57fc19281f1
curl-debugsource-7.61.1-34.el8_10.8.s390x.rpm SHA-256: 9b623d57dcfaa0463d5a33e11b25ccf138be3761995cbf2a1ec56b8cba62b004
curl-minimal-debuginfo-7.61.1-34.el8_10.8.s390x.rpm SHA-256: b8111050da99e487e5a4521aeaa08af5763555db128bdb5bd94bc29f206d80c8
libcurl-7.61.1-34.el8_10.8.s390x.rpm SHA-256: 86befe06d0b244970667b406c4a8813db960dc96426e21b6da6bb0a644b8116e
libcurl-debuginfo-7.61.1-34.el8_10.8.s390x.rpm SHA-256: 2bdba4fb34ccffecf4af3a0d4844cc6bbb956d57a381bb717de5a23779971656
libcurl-devel-7.61.1-34.el8_10.8.s390x.rpm SHA-256: 6da4f9c9014f25f00f77c3a94a992e97321a2e192cc890c582cda9f8d6a77fef
libcurl-minimal-7.61.1-34.el8_10.8.s390x.rpm SHA-256: cb6a87adf6701a8b511cef2b37766eb00f95be710e48fa235b64a2ffa4a9529f
libcurl-minimal-debuginfo-7.61.1-34.el8_10.8.s390x.rpm SHA-256: 3fa2f9b0e394051c7c6b935859e05b67f951d0c29bb1a37000df694f6c91159d

Red Hat Enterprise Linux for Power, little endian 8

SRPM
curl-7.61.1-34.el8_10.8.src.rpm SHA-256: e55a19948468c7de635492deb76e07d1f29fa9531d7b74649c66de88b7a420ae
ppc64le
curl-7.61.1-34.el8_10.8.ppc64le.rpm SHA-256: 72ad264c5a0e45b5dedb4bff085b04fd5fc74c59afc3db7295da471e7c3b572e
curl-debuginfo-7.61.1-34.el8_10.8.ppc64le.rpm SHA-256: beda73ca3871590ad25d614e1cb767a6c72f3566a3b6dc00e6b8116c29148fcb
curl-debugsource-7.61.1-34.el8_10.8.ppc64le.rpm SHA-256: a60fc6cbc9c2c9197c5714f0e2b16610ecef20c01376ab199d05979d960f6696
curl-minimal-debuginfo-7.61.1-34.el8_10.8.ppc64le.rpm SHA-256: 4bdee52c8c280a010fd49847e780ce52a6e7e7b3778783b6f944baf2a94cd25a
libcurl-7.61.1-34.el8_10.8.ppc64le.rpm SHA-256: 6204463299bdd86db34a8522739418283e80e9564da556d51d6dd2c22ad3bda0
libcurl-debuginfo-7.61.1-34.el8_10.8.ppc64le.rpm SHA-256: f0cf31d64b58214171b3f7b0f4a81ea21585dbd54b4b6b37f36843aa211b3d46
libcurl-devel-7.61.1-34.el8_10.8.ppc64le.rpm SHA-256: 34711fc4e461c6c186444c34c5b0ef786c6a63b9f7a26b6a7dc67d4cab4a7a33
libcurl-minimal-7.61.1-34.el8_10.8.ppc64le.rpm SHA-256: be61b735d2222820ca2489e9f29b2e85fe002e21e1adc01d4754cc3dba0a4122
libcurl-minimal-debuginfo-7.61.1-34.el8_10.8.ppc64le.rpm SHA-256: 90764abf9e469615d68f81fc7b65f01ab875e58eda8584b220a614a67b52ee26

Red Hat Enterprise Linux for ARM 64 8

SRPM
curl-7.61.1-34.el8_10.8.src.rpm SHA-256: e55a19948468c7de635492deb76e07d1f29fa9531d7b74649c66de88b7a420ae
aarch64
curl-7.61.1-34.el8_10.8.aarch64.rpm SHA-256: 2b6cb084b32347429a989027d79cc0a9d39012426e7b4810affc03f9cd9c4273
curl-debuginfo-7.61.1-34.el8_10.8.aarch64.rpm SHA-256: b5b884c86e95576f96f1c24ed945c0ba8c50cedeef3f6c8b70db3c5e3d0a3aa1
curl-debugsource-7.61.1-34.el8_10.8.aarch64.rpm SHA-256: f7fcf5aeefc6b7ad558339db4cf2c0db8741d2f5b65b8ff1778c375a65bfdb59
curl-minimal-debuginfo-7.61.1-34.el8_10.8.aarch64.rpm SHA-256: 573f6372658bc74055825f58ebbf2f765c8e4aca1785d21565f044bba8cbfeb7
libcurl-7.61.1-34.el8_10.8.aarch64.rpm SHA-256: 34c1619ca5115ba3a275e1be9c4800c4b03971fc1549cb9f4d1fa60f4861987b
libcurl-debuginfo-7.61.1-34.el8_10.8.aarch64.rpm SHA-256: 991afd74189ef863b02f07e63750172dc792389756f68a4773395f03752b2bb3
libcurl-devel-7.61.1-34.el8_10.8.aarch64.rpm SHA-256: 79ccc1c1bbbba893721901e4b8319640993b4e8489c89c9435eacac4b80016ba
libcurl-minimal-7.61.1-34.el8_10.8.aarch64.rpm SHA-256: 566f2ceec362c21faadacc5792ddde4d591492d9bc774ba1fbc1ca2eed839a23
libcurl-minimal-debuginfo-7.61.1-34.el8_10.8.aarch64.rpm SHA-256: 0c373f57ef32ae69367b3e03e01a891332f3710d2f23d159f75d82ebe2ae8482

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.