tocsin

Alpine/curl: high 7.5

A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies

Action: Upgrade curl to 7.51.0-r0 or later.

Affected

introducedfixedlast affected
07.51.0-r0-

Fixed versions

7.51.0-r0

Sources

published · modified · JSON