Package: libcurl3
Version: 7.21.0-2.1+squeeze1, 7.24.0-1
Severity: grave

Hi,

After the upgrade from 7.21.0-2 or 7.23.1-3 some sites stop to
work while others continue to work.

My guess is that this is related to the CVE-2011-3389 change.
If my memory is any good, the reason why openssl still does
something with that option is because not all implementations
work without it.  I think I at least saw a blog post about
the state of that issue a few months ago.

I can reproduce this with:
$ curl https://www.eboekhuis.nl
curl: (52) Empty reply from server

Downgrading libcurl3 fixes my issue.


Kurt




-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to