256840 matches found
UBUNTU-CVE-2026-13608
A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle MITM attack can inject a premature or shortcut response that bypasses complete peer...
UBUNTU-CVE-2026-80229
When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...
UBUNTU-CVE-2026-80230
When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...
UBUNTU-CVE-2026-82209
When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...
MINI-CPVM-JQC8-6RHJ
Bulletin has no description...
MINI-XRW2-M8Q2-Q678
Bulletin has no description...
MINI-WJQF-7M89-4P89
Bulletin has no description...
MINI-FMVM-3R2W-V89V
Bulletin has no description...
MINI-GFGM-R3RM-5Q7J
Bulletin has no description...
MINI-FVQ6-4C3R-89P4
Bulletin has no description...
MINI-3FGG-HM8F-GJ56
Bulletin has no description...
MINI-32V9-34C3-6J95
Bulletin has no description...
MINI-WPG8-9MX8-9JQ9
Bulletin has no description...
MINI-XGGG-HJH2-9C8W
Bulletin has no description...
MINI-FX3M-CGP6-QG8J
Bulletin has no description...
MINI-C2Q9-28JF-Q6H7
Bulletin has no description...
MINI-68MX-GPP7-QXQ2
Bulletin has no description...
MINI-4FW7-M96X-CP87
Bulletin has no description...