The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Importing a `includeSubDomains` parent HSTS entry before a longer-lived child entry, silently drops the child. Consequently, when the parent expires, the child's valid HSTS policy is lost, causing curl to issue unencrypted HTTP requests rather than upgrading to HTTPS.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade libcurl3-gnutlsUpgrade libcurl4Upgrade libcurl4-openssl-devUpgrade libcurl4t64Upgrade libcurl3-nssUpgrade libcurl4-nss-devUpgrade libcurl3t64-gnutlsUpgrade curlUpgrade libcurl4-gnutls-dev | Oct 14, 2026 | Oct 14, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub