Debian/curl: unknown
The GnuTLS backend in libcurl 7.21.4 through 7.33.0, when disabling digital signature verification (CURLOPT_SSL_VERIFYPEER), also disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fiel
Action: Upgrade curl to 7.34.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.34.0-1 | - |
Fixed versions
| 7.34.0-1 |
Sources
published · modified · JSON