From: Daniel Stenberg <daniel@haxx.se>
Date: Fri, 10 Mar 2023 07:22:51 +0000 (+0100)
Subject: [PATCH] url: fix the SSH connection reuse check
X-Git-Tag: archive/raspbian/7.88.1-10+rpi1+deb12u8^2~23
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=cf6da67881ec9528f4e4d23556e7685f05296761;p=curl.git

[PATCH] url: fix the SSH connection reuse check

Reported-by: Harry Sintonen
Closes #10735

Gbp-Pq: Name CVE-2023-27538.patch
---

diff --git a/lib/url.c b/lib/url.c
index 1bb93df9..747200e8 100644
--- a/lib/url.c
+++ b/lib/url.c
@@ -1300,7 +1300,7 @@ ConnectionExists(struct Curl_easy *data,
            (data->state.httpwant < CURL_HTTP_VERSION_3))))
         continue;
 
-      if(get_protocol_family(needle->handler) == PROTO_FAMILY_SSH) {
+      if(get_protocol_family(needle->handler) & PROTO_FAMILY_SSH) {
         if(!ssh_config_matches(needle, check))
           continue;
       }