USN-7012-1

Details

Hiroki Kurosawa discovered that curl incorrectly handled certain OCSP responses. This could result in bad certificates not being checked properly, contrary to expectations.

Affected Packages

curl

Ubuntu 20.04 LTS

Fixed in:

7.68.0-1ubuntu2.24

curl

Ubuntu 22.04 LTS

Fixed in:

7.81.0-1ubuntu1.18

curl

Ubuntu 24.04 LTS

Fixed in:

8.5.0-2ubuntu10.4

References

REPORT

https://ubuntu.com/security/CVE-2024-8096

ADVISORY

https://ubuntu.com/security/notices/USN-7012-1