2 Commits

Author	SHA1	Message	Date
Dan Fandrich	e7a021e135	tests: use %LOGDIR to refer to the log directory ... This will allow it be set dynamically. Ref: #10818	2023-03-30 09:53:57 -07:00
Patrick Monnerat	8ef147c436	ftp,imap,pop3,smtp: reject STARTTLS server response pipelining ... If a server pipelines future responses within the STARTTLS response, the former are preserved in the pingpong cache across TLS negotiation and used as responses to the encrypted commands. This fix detects pipelined STARTTLS responses and rejects them with an error. CVE-2021-22947 Bug: https://curl.se/docs/CVE-2021-22947.html	2021-09-13 16:51:31 +02:00