Public bug reported:
https://ubuntu.com/security/notices/USN-8487-1
https://curl.se/docs/CVE-2026-9080.html
https://github.com/curl/curl/commit/5ab34cba42e4ee4282fe (original upstream fix)
https://github.com/curl/curl/commit/e9a2b0dc7 (later upstream add-on)
USN-8487-1 included a Resolute backport of the original upstream fix for
CVE-2026-9080, but that fix was incomplete upstream. It has since been
updated, so the new commit (see above) is needed in Resolute.
curl 8.18.0-1ubuntu2.5
** Affects: curl (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2167969
Title:
Upstream update to CVE-2026-9080 fix missing in Resolute
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/curl/+bug/2167969/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
