tocsin

Alpine/curl: high 7.5

curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '#' character, and could instead be tricked into connecting to a different hos

Action: Upgrade curl to 7.49.1-r4 or later.

Affected

introducedfixedlast affected
07.49.1-r4-

Fixed versions

7.49.1-r4

Sources

published · modified · JSON