View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2024-8096 severity moderate: SUSE including 390 source package names (0.0.17-1.1:curl-8.6.0-150600.4.6.1, 0.0.17-1.1:libcurl4-8.6.0-150600.4.6.1, …), 992 product×package rows across 345 product lines (Container bci/gcc, Container bci/golang, … (345 product lines)): Fixed 772, Known Affected 213, Known Not Affected 6, First Fixed 1.
When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine. If the returned status reports another error than 'revoked' (like for example 'unauthorized') it is not treated as a bad certficate.