CVE-2021-22924

A flaw was found in libcurl in the way libcurl handles previously used connections without accounting for ‘issuer cert’ and comparing the involved paths case-insensitively. This flaw allows libcurl to use the wrong connection. The highest threat from this vulnerability is to confidentiality.

Mitigation

This flaw can be mitigated by upgrading the affected curl utility to version 7.78.0