USN-8820-1: curl vulnerabilities
AI Summary
Eunsoo Kim discovered that curl incorrectly handled SASL negotiation for LDAP authentication in certain circumstances. A machine-in-the-middle attacker could possibly use this issue to bypass peer validation. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS.
Discussion
Sign in to join the discussion.
Loading comments…