SB2026033166 - Anolis OS update for curl

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Authentication Bypass by Primary Weakness (CVE-ID: CVE-2026-1965)

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to improper reuse of HTTP Negotiate connection. A remote attacker can bypass authentication and gain access to the target system.

2) Authentication Bypass by Primary Weakness (CVE-ID: CVE-2026-3784)

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to wrong proxy connection reuse with credentials. A remote attacker can bypass authentication and gain access to the target system.

Remediation

Install update from vendor's website.

References

• https://anas.openanolis.cn/errata/detail/ANSA-2026:0374