Debian/curl: critical 9.8
libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host
Action: Upgrade curl to 7.58.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.58.0-1 | - |
Fixed versions
| 7.58.0-1 |
Sources
published · modified · JSON