tocsin

Debian/curl: unknown

cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.

Action: Upgrade curl to 7.38.0-1 or later.

Affected

introducedfixedlast affected
07.38.0-1-

Fixed versions

7.38.0-1

Sources

published · modified · JSON