Debian/curl: unknown
The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arb
Action: Upgrade curl to 7.18.2-8.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.18.2-8.1 | - |
Fixed versions
| 7.18.2-8.1 |
Sources
published · modified · JSON