Debian/curl: high 7.5
curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session.
Action: Upgrade curl to 7.50.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.50.1-1 | - |
Fixed versions
| 7.50.1-1 |
Sources
published · modified · JSON