Importing a `includeSubDomains` parent HSTS entry before a longer-lived child entry, silently drops the child. Consequently, when the parent expires, the child's valid HSTS policy is lost, causing curl to issue unencrypted HTTP requests rather than upgrading to HTTPS.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade libcurl3t64-gnutlsUpgrade libcurl3-nssUpgrade curlUpgrade libcurl4-nss-devUpgrade libcurl4-gnutls-devUpgrade libcurl4Upgrade libcurl4t64Upgrade libcurl4-openssl-devUpgrade libcurl3-gnutls | Oct 14, 2026 | Oct 14, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub