boucle 7.41.0 par 7.73.0 est vulnérable à une vérification incorrecte de la révocation des certificats de vérification insuffisante en raison de la réponse OCSP.
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
https://security.gentoo.org/glsa/202012-14
https://curl.se/docs/CVE-2020-8286.html
https://curl.se/docs/CVE-2020-8286.html
https://hackerone.com/reports/1048457
https://hackerone.com/reports/1048457
https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286