https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T10:35:46.436032+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2016-5419 CVE-2016-5419 2026-10-07T10:35:46.457425+00:00

curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session.

 https://cve.radiocsirt.org/vuln/usn-3048-1 USN-3048-1 — curl vulnerabilities 2026-10-07T10:35:46.457484+00:00

Affected: Ubuntu:14.04:LTS: curl, Ubuntu:16.04:LTS: curl

Bru Rom discovered that curl incorrectly handled client certificates when resuming a TLS session. (CVE-2016-5419)

It was discovered that curl incorrectly handled client certificates when reusing TLS connections. (CVE-2016-5420)

Marcelo Echeverria and Fernando Muñoz discovered that curl incorrectly reused a connection struct, contrary to expectations. This issue only applied to Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-5421)