curl / curl-www

The curl.se website
https://curl.se/
MIT License
101 stars 88 forks source link

Question: CVE-2024-0853 #328

Closed vruge closed 4 months ago

vruge commented 4 months ago

Affected versions: curl 8.5.0 to and including 8.5.0

In
https://curl.se/changes.html#8_4_0

I find the point libcurl: OCSP stapling fails when SSL context is reused

Is this version also affected? @bagder

danielgustafsson commented 4 months ago

No, the CVE clearly states which versions it affects and even lists the commit in which the defect was introduced.