Ubuntu 26.10 curl update fixes WebSocket read and reuse bugs
USN-8927-2 backports fixes for an out-of-bounds read and a connection-reuse flaw, CVE-2026-107928 and CVE-2026-107929.
Stories per day · 30 days
1 RSS
Relatedcert-cc2curl2name-constraints2openssl2tls2ubuntu2websocket2x5092aws-sigv41cryptography1information-disclosure1pki1usn1wolfssl1
6 stories, newest first · one card per story
Stories tagged #gnutls
VU#948176: Multiple TLS Libraries can Bypass Delegation Enforcement
CERT/CC says TLS libraries inconsistently enforce Name Constraints, with three assigned CVEs already fixed.
3
USN-8927-1: curl vulnerabilities
Ubuntu’s USN-8927-1 patches curl flaws that may leak data or reuse the wrong network interface.
VU#573195: Go, OpenSSL, Apple, LibreSSL, pyca, wolfSSL Name-Constraint Inconsistency in RFC 5280 Implementation
CERT/CC warns TLS libraries inconsistently enforce X.509 name constraints, with fixes for GnuTLS and pyca/cryptography.
4
USN-8834-1: Exim vulnerabilities
Ubuntu patched Exim flaws, including a Proxy Protocol out-of-bounds write that could allow remote code execution.
Exim Mail Server 4.100.1 Fixes 4 Security Flaws Including SMTP Smuggling and Heap Corruption
Exim 4.100.1 patches four flaws, including high-severity Proxy Protocol heap corruption, uninitialized data leak, GnuTLS use-after-free, and SMTP smuggling.