Design/Logic Flaw

curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server's certificate's validity in the code that checks for a test success or failure. It ends up always thinking there's valid proof, even when there is none or if the server...

Security fix for the ALT Linux 8 package curl version 7.53.0-alt1

Feb. 22, 2017 Anton Farygin 7.53.0-alt1 - new version with security fixes: CVE-2017-2629: SSLVERIFYSTATUS ignored...