tocsin

Debian/curl: high 7.5

An issue in curl’s QUIC UDP receive function allows a malicious HTTP/3 server to trigger a remote denial of service against a curl or libcurl client. Because the helper function discards zero-length U

Action: Upgrade curl to 8.21.0~rc2-1 or later.

Affected

introducedfixedlast affected
08.21.0~rc2-1-

Fixed versions

8.21.0~rc2-1

Sources

published · modified · JSON