]> git.ipfire.org Git - thirdparty/curl.git/commit
projects / thirdparty / curl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4315749) | patch
ftp,imap,pop3: do not ignore --ssl-reqd
authorPatrick Monnerat <patrick@monnerat.net>
Wed, 8 Sep 2021 09:56:22 +0000 (11:56 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Mon, 13 Sep 2021 14:51:31 +0000 (16:51 +0200)
commit364f174724ef115c63d5e5dc1d3342c8a43b1cca
tree9856fb764ee026d4c55c9525496b541a79af7800tree
parent43157490a5054bd24256fe12876931e8abc9df49commit | diff
ftp,imap,pop3: do not ignore --ssl-reqd

In imap and pop3, check if TLS is required even when capabilities
request has failed.

In ftp, ignore preauthentication (230 status of server greeting) if TLS
is required.

Bug: https://curl.se/docs/CVE-2021-22946.html

CVE-2021-22946
lib/ftp.c diff | blob | blame | history
lib/imap.c diff | blob | blame | history
lib/pop3.c diff | blob | blame | history
tests/data/Makefile.inc diff | blob | blame | history
tests/data/test984 [new file with mode: 0644] blob
tests/data/test985 [new file with mode: 0644] blob
tests/data/test986 [new file with mode: 0644] blob
Mirror of https://github.com/curl/curl.git