Home / mailings [gentoo-announce] [ GLSA 202611-07 ] curl: Multiple Vulnerabilities
Posted on 12 November 2026
Gentoo-announce- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 202611-07
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
https://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Severity: High
Title: curl: Multiple Vulnerabilities
Date: November 12, 2026
Bugs: #937125, #942952, #946291, #949330, #949342, #962682, #966140, #969430, #971090, #978006, #982083, #984218
ID: 202611-07
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Synopsis
========
Multiple vulnerabilities have been found in curl, the worst of which
could result in arbitrary code execution.
Background
==========
A command line tool and library for transferring data with URLs.
Affected packages
=================
Package Vulnerable Unaffected
------------- ------------ ------------
net-misc/curl < 8.23.0 >= 8.23.0
Description
===========
Multiple vulnerabilities have been discovered in curl. Please review the
CVE identifiers referenced below for details.
Impact
======
Please review the referenced CVE identifiers for details.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All curl users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/curl-8.23.0"
References
==========
[ 1 ] CVE-2024-7264
https://nvd.nist.gov/vuln/detail/CVE-2024-7264
[ 2 ] CVE-2024-9681
https://nvd.nist.gov/vuln/detail/CVE-2024-9681
[ 3 ] CVE-2024-11053
https://nvd.nist.gov/vuln/detail/CVE-2024-11053
[ 4 ] CVE-2025-0167
https://nvd.nist.gov/vuln/detail/CVE-2025-0167
[ 5 ] CVE-2025-0665
https://nvd.nist.gov/vuln/detail/CVE-2025-0665
[ 6 ] CVE-2025-0725
https://nvd.nist.gov/vuln/detail/CVE-2025-0725
[ 7 ] CVE-2025-9086
https://nvd.nist.gov/vuln/detail/CVE-2025-9086
[ 8 ] CVE-2025-10148
https://nvd.nist.gov/vuln/detail/CVE-2025-10148
[ 9 ] CVE-2025-11563
https://nvd.nist.gov/vuln/detail/CVE-2025-11563
[ 10 ] CVE-2025-13034
https://nvd.nist.gov/vuln/detail/CVE-2025-13034
[ 11 ] CVE-2025-14017
https://nvd.nist.gov/vuln/detail/CVE-2025-14017
[ 12 ] CVE-2025-14524
https://nvd.nist.gov/vuln/detail/CVE-2025-14524
[ 13 ] CVE-2025-14819
https://nvd.nist.gov/vuln/detail/CVE-2025-14819
[ 14 ] CVE-2025-15079
https://nvd.nist.gov/vuln/detail/CVE-2025-15079
[ 15 ] CVE-2025-15224
https://nvd.nist.gov/vuln/detail/CVE-2025-15224
[ 16 ] CVE-2026-1965
https://nvd.nist.gov/vuln/detail/CVE-2026-1965
[ 17 ] CVE-2026-3783
https://nvd.nist.gov/vuln/detail/CVE-2026-3783
[ 18 ] CVE-2026-3784
https://nvd.nist.gov/vuln/detail/CVE-2026-3784
[ 19 ] CVE-2026-3805
https://nvd.nist.gov/vuln/detail/CVE-2026-3805
[ 20 ] CVE-2026-8286
https://nvd.nist.gov/vuln/detail/CVE-2026-8286
[ 21 ] CVE-2026-8458
https://nvd.nist.gov/vuln/detail/CVE-2026-8458
[ 22 ] CVE-2026-8924
https://nvd.nist.gov/vuln/detail/CVE-2026-8924
[ 23 ] CVE-2026-8925
https://nvd.nist.gov/vuln/detail/CVE-2026-8925
[ 24 ] CVE-2026-8926
https://nvd.nist.gov/vuln/detail/CVE-2026-8926
[ 25 ] CVE-2026-8927
https://nvd.nist.gov/vuln/detail/CVE-2026-8927
[ 26 ] CVE-2026-8932
https://nvd.nist.gov/vuln/detail/CVE-2026-8932
[ 27 ] CVE-2026-9079
https://nvd.nist.gov/vuln/detail/CVE-2026-9079
[ 28 ] CVE-2026-9080
https://nvd.nist.gov/vuln/detail/CVE-2026-9080
[ 29 ] CVE-2026-9545
https://nvd.nist.gov/vuln/detail/CVE-2026-9545
[ 30 ] CVE-2026-9546
https://nvd.nist.gov/vuln/detail/CVE-2026-9546
[ 31 ] CVE-2026-9547
https://nvd.nist.gov/vuln/detail/CVE-2026-9547
[ 32 ] CVE-2026-10536
https://nvd.nist.gov/vuln/detail/CVE-2026-10536
[ 33 ] CVE-2026-11352
https://nvd.nist.gov/vuln/detail/CVE-2026-11352
[ 34 ] CVE-2026-11564
https://nvd.nist.gov/vuln/detail/CVE-2026-11564
[ 35 ] CVE-2026-11586
https://nvd.nist.gov/vuln/detail/CVE-2026-11586
[ 36 ] CVE-2026-11856
https://nvd.nist.gov/vuln/detail/CVE-2026-11856
[ 37 ] CVE-2026-12064
https://nvd.nist.gov/vuln/detail/CVE-2026-12064
[ 38 ] CVE-2026-13608
https://nvd.nist.gov/vuln/detail/CVE-2026-13608
[ 39 ] CVE-2026-18924
https://nvd.nist.gov/vuln/detail/CVE-2026-18924
[ 40 ] CVE-2026-19931
https://nvd.nist.gov/vuln/detail/CVE-2026-19931
[ 41 ] CVE-2026-80229
https://nvd.nist.gov/vuln/detail/CVE-2026-80229
[ 42 ] CVE-2026-80230
https://nvd.nist.gov/vuln/detail/CVE-2026-80230
[ 43 ] CVE-2026-80231
https://nvd.nist.gov/vuln/detail/CVE-2026-80231
[ 44 ] CVE-2026-80255
https://nvd.nist.gov/vuln/detail/CVE-2026-80255
[ 45 ] CVE-2026-80256
https://nvd.nist.gov/vuln/detail/CVE-2026-80256
[ 46 ] CVE-2026-82208
https://nvd.nist.gov/vuln/detail/CVE-2026-82208
[ 47 ] CVE-2026-82209
https://nvd.nist.gov/vuln/detail/CVE-2026-82209
[ 48 ] CVE-2026-86409
https://nvd.nist.gov/vuln/detail/CVE-2026-86409
[ 49 ] CVE-2026-86410
https://nvd.nist.gov/vuln/detail/CVE-2026-86410
[ 50 ] CVE-2026-86411
https://nvd.nist.gov/vuln/detail/CVE-2026-86411
[ 51 ] CVE-2026-86412
https://nvd.nist.gov/vuln/detail/CVE-2026-86412
[ 52 ] CVE-2026-86413
https://nvd.nist.gov/vuln/detail/CVE-2026-86413
[ 53 ] CVE-2026-86414
https://nvd.nist.gov/vuln/detail/CVE-2026-86414
[ 54 ] CVE-2026-86415
https://nvd.nist.gov/vuln/detail/CVE-2026-86415
[ 55 ] CVE-2026-87861
https://nvd.nist.gov/vuln/detail/CVE-2026-87861
[ 56 ] CVE-2026-87862
https://nvd.nist.gov/vuln/detail/CVE-2026-87862
[ 57 ] CVE-2026-87863
https://nvd.nist.gov/vuln/detail/CVE-2026-87863
[ 58 ] CVE-2026-87864
https://nvd.nist.gov/vuln/detail/CVE-2026-87864
[ 59 ] CVE-2026-87865
https://nvd.nist.gov/vuln/detail/CVE-2026-87865
[ 60 ] CVE-2026-87866
https://nvd.nist.gov/vuln/detail/CVE-2026-87866
[ 61 ] CVE-2026-92386
https://nvd.nist.gov/vuln/detail/CVE-2026-92386
[ 62 ] CVE-2026-92387
https://nvd.nist.gov/vuln/detail/CVE-2026-92387
[ 63 ] CVE-2026-92388
https://nvd.nist.gov/vuln/detail/CVE-2026-92388
[ 64 ] CVE-2026-92389
https://nvd.nist.gov/vuln/detail/CVE-2026-92389
[ 65 ] CVE-2026-92390
https://nvd.nist.gov/vuln/detail/CVE-2026-92390
[ 66 ] CVE-2026-92391
https://nvd.nist.gov/vuln/detail/CVE-2026-92391
[ 67 ] CVE-2026-92392
https://nvd.nist.gov/vuln/detail/CVE-2026-92392
[ 68 ] CVE-2026-94265
https://nvd.nist.gov/vuln/detail/CVE-2026-94265
[ 69 ] CVE-2026-94266
https://nvd.nist.gov/vuln/detail/CVE-2026-94266
[ 70 ] CVE-2026-107928
https://nvd.nist.gov/vuln/detail/CVE-2026-107928
[ 71 ] CVE-2026-107929
https://nvd.nist.gov/vuln/detail/CVE-2026-107929
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
https://security.gentoo.org/glsa/202611-07
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https://bugs.gentoo.org.
License
=======
Copyright 2026 Gentoo Authors; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license (CC-BY-SA-4.0).
https://creativecommons.org/licenses/by-sa/4.0
--===============0964443922789213557==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
