When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcurl find and accept a trust chain that it otherwise would not.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade curl | May 20, 2026 | Jan 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade libcurl-develUpgrade libcurlUpgrade curlUpgrade curl-debuginfo | May 20, 2026 | May 20, 2026 |
| Apple Osx Curl | — | Upgrade macOS to the latest version | Sep 16, 2026 | Sep 14, 2026 |
| Debian | — | Upgrade curl | Jul 12, 2026 | Jul 12, 2026 |
| Freebsd | — | Upgrade curl | Mar 12, 2026 | Mar 11, 2026 |
| Ibm Aix | — | Apply the fix or workaround for curl_advisory10 | Jun 28, 2026 | Jun 26, 2026 |
| Notepad Plus Plus | — | Upgrade NotepadPlusPlus to the latest version | Apr 27, 2026 | Jan 8, 2026 |
| Notepadplusplus | — | — | Apr 15, 2026 | Jan 8, 2026 |
| Redhat_linux | — | Upgrade libcurl-minimal-debuginfoUpgrade curl-debugsourceUpgrade libcurl-minimalUpgrade curlUpgrade libcurl-develUpgrade curl-debuginfoNo solution existsUpgrade libcurlUpgrade libcurl-debuginfo | Jul 17, 2026 | Jan 7, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.9Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 10.2.6Upgrade Splunk Enterprise to version 9.4.14 | Aug 20, 2026 | Jan 8, 2026 |
| Ubuntu | — | Upgrade libcurl3-nssUpgrade libcurl4-nss-devUpgrade curlUpgrade libcurl4t64Upgrade libcurl3t64-gnutlsUpgrade libcurl3-gnutlsUpgrade libcurl4Upgrade libcurl4-openssl-devUpgrade libcurl4-gnutls-dev | Feb 26, 2026 | Feb 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 8, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub