[PATCH] url: fix the SSH connection reuse check

Reported-by: Harry Sintonen
Closes #10735

Gbp-Pq: Name CVE-2023-27538.patch

diff --git a/lib/url.c b/lib/url.c
index 1bb93df913dc4b003cca039adbcfbdfde25c569e..747200e86259f1eba2b1653ba317a26679997950 100644 (file)
--- a/lib/url.c
+++ b/lib/url.c
@@ -1300,7 +1300,7 @@ ConnectionExists(struct Curl_easy *data,
            (data->state.httpwant < CURL_HTTP_VERSION_3))))
         continue;
 
-      if(get_protocol_family(needle->handler) == PROTO_FAMILY_SSH) {
+      if(get_protocol_family(needle->handler) & PROTO_FAMILY_SSH) {
         if(!ssh_config_matches(needle, check))
           continue;
       }