AVG-179

Package curl
Status Fixed
Severity Low
Type insufficient validation
Affected 7.52.1-2
Fixed 7.53.0-1
Current 7.58.0-1 [core]
Ticket None
Created Wed Feb 22 10:54:12 2017
Issue Severity Remote Type Description
CVE-2017-2629 Low Yes Insufficient validation
A coding error has been found in curl >= 7.52.0 and < 7.53.0, causing the TLS Certificate Status Request extension check to always return true.
curl and...
Date Advisory Package Description
03 Mar 2017 ASA-201703-1 curl insufficient validation
References
https://curl.haxx.se/docs/adv_20170222.html