When doing TLS related transfers with reused easy or multi handles and
altering the CURLSSLOPT_NO_PARTIALCHAIN option, libcurl could accidentally
reuse a CA store cached in memory for which the partial chain option was
reversed. Contrary to the users wishes and expectations. This could make
libcurl find and accept a trust chain that it otherwise would not.
Weakness
The product does not validate, or incorrectly validates, a certificate.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Curl | Haxx | 7.87.0 (including) | 8.18.0 (excluding) |
| Red Hat Hardened Images | RedHat | curl-main-8.19.0-3.hum1 | * |
| Curl | Ubuntu | noble | * |
| Curl | Ubuntu | plucky | * |
| Curl | Ubuntu | questing | * |
| Curl | Ubuntu | upstream | * |