Change #278686
| Category | None |
| Changed by | Stefan Eissing <stefan@eissing.org> |
| Changed at | Sun 16 Aug 2026 23:18:39 |
| Repository | https://api.github.com/repos/curl/curl |
| Project | curl/curl |
| Branch | curl-8.20.X |
| Revision | 63bd51c1cd2bf0fbc5d8e9c85921cb2b2b040aed |
Comments
CVE-2026-8286: wrong STARTTLS connection reuse [fixed] url: fix connection reuse for starttls protocols When a connection is tested for reuse in a transfer that *may* upgrade to TLS (commonly via STARTTLS), the SSL configuration must match the existing connection. Cherry-picked a86efdd7ca5433de9231e6 Reported-by: Andrew Nesbit Closes #21522
Changed files
- lib/url.c