tocsin

Alpine/curl: low 3.7

curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.3

Action: Upgrade curl to 7.76.0-r0 or later.

Affected

introducedfixedlast affected
07.76.0-r0-

Fixed versions

7.76.0-r0

Sources

published · modified · JSON