ALPINE-CVE-2026-86415
ALPINE-CVE-2026-86415
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a transfer that got redirected to a different origin, even though the code explicitly switched off the auto client cert option for that transfer to prevent exactly this.
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system