Skip to content
NewA calmer, faster ZeroHour
Advisorylow

USN-8670-3: curl vulnerability

Ubuntu Security Notices ()3
Read at ubuntu.com
AI summary · glm-5.3-flashSummaries by Vani AI

Ubuntu issued USN-8670-3 updating curl for Ubuntu 26.04 LTS to fix a flaw where wrong client certificates could be used on reused connections.

Ubuntu Security Notice USN-8670-3 extends the curl fix from USN-8670-1 to Ubuntu 26.04 LTS. The flaw, discovered by Joshua Rogers, involves incorrect handling of connection reuse when client certificate settings change, potentially causing the wrong client certificate to be presented. The issue can lead to authentication mix-ups rather than remote code execution.

Key facts
  • Update for Ubuntu 26.04 LTS following earlier USN-8670-1
  • Connection reuse with changed client certificate settings mishandled
  • Impact is wrong-certificate use, not code execution
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
advisoryclient-certificatecurltlsubuntu
Vendors
UbuntuCanonical
Products
curlUbuntu 26.04 LTS

From the original article

USN-8670-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 26. 04 LTS.

Ubuntu Security Notices

ubuntu.com

Read the full article at Ubuntu Security Notices

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.