tocsin

Debian/curl: high 7.5

In this scenario, libcurl first uses a proper HTTP/3 server for the initial transfers, and when it makes a second transfer to the same site it has been replaced by the attacker's impostor machine - wi

Action: Upgrade curl to 8.21.0~rc2-1 or later.

Affected

introducedfixedlast affected
08.21.0~rc2-1-

Fixed versions

8.21.0~rc2-1

Sources

published · modified · JSON