Alpine/curl: medium 6.5
libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-midd
Action: Upgrade curl to 8.14.0-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.8.0 | 8.14.0-r0 | - |
Fixed versions
| 8.14.0-r0 |
Sources
published · modified · JSON