tocsin

Debian/curl: high 7.3

When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integ

Action: Upgrade curl to 8.12.0+git20250209.89ed161+ds-1 or later.

Affected

introducedfixedlast affected
08.12.0+git20250209.89ed161+ds-1-

Fixed versions

8.12.0+git20250209.89ed161+ds-1

Sources

published · modified · JSON