USN-8670-3: correção de vulnerabilidade no curl para Ubuntu 26.04 LTS

USN-8670-3: vulnerabilidade no curl

O Ubuntu publicou o aviso de segurança USN-8670-3 em 8 de setembro de 2026 para tratar de uma vulnerabilidade no curl, identificada como CVE-2026-8932. A referência oficial é https://ubuntu.com/security/notices/USN-8670-3.

O aviso traz pacotes corrigidos para o Ubuntu 26.04 LTS (resolute) na versão 8.18.0-1ubuntu2.5, fornecidos como atualização padrão (standard update).

O aviso original inclui o seguinte bloco de dados, preservado integralmente:

{
"project": "ubuntu",
"event": "security",
"identifier": "USN-8670-3",
"version": null,
"announcementDate": "2026-09-08 17:20:54+00",
"officialSource": "https://ubuntu.com/security/notices/USN-8670-3",
"cves": [
"CVE-2026-8932"
],
"fixedPackages": [
{
"release": "26.04 LTS resolute",
"package": "curl",
"version": "8.18.0-1ubuntu2.5",
"access": "standard update"
},
{
"release": "26.04 LTS resolute",
"package": "libcurl3t64-gnutls",
"version": "8.18.0-1ubuntu2.5",
"access": "standard update"
},
{
"release": "26.04 LTS resolute",
"package": "libcurl4-gnutls-dev",
"version": "8.18.0-1ubuntu2.5",
"access": "standard update"
},
{
"release": "26.04 LTS resolute",
"package": "libcurl4-openssl-dev",
"version": "8.18.0-1ubuntu2.5",
"access": "standard update"
},
{
"release": "26.04 LTS resolute",
"package": "libcurl4t64",
"version": "8.18.0-1ubuntu2.5",
"access": "standard update"
}
],
"editorialLimits": "Use only these verified fields. No inferred features, upgrade commands, affected-version ranges or support deadlines. A release announcement does not establish distribution package availability. For security fixes preserve the exact distribution, package version and Pro/ESM access requirements; CVEs do not imply every listed release is affected by every issue."
}