This bug was fixed in the package curl - 7.19.7-1ubuntu1.5
---------------
curl (7.19.7-1ubuntu1.5) lucid-security; urgency=low
* SECURITY REGRESSION: can't disable cert checking in command line tool
(LP: #1258366)
- debian/patches/CVE-2013-4545.patch: properly disable host
verification when insecure mode is used in src/main.c.
- CVE-2013-4545
-- Marc Deslauriers <[email protected]> Fri, 06 Dec 2013 07:52:56
-0500
** Changed in: curl (Ubuntu Lucid)
Status: Confirmed => Fix Released
** Changed in: curl (Ubuntu Precise)
Status: Confirmed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1258366
Title:
curl -k breaks for some certificates after USN-2048-1
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/curl/+bug/1258366/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
