A new Debian Linux update has been published: DLA 2382-1: curl security update
A curl security update has been released for Debian GNU/Linux 9 LTS to address a rare issue when using the multi API of curl in combination with CURLOPT_CONNECT_ONLY.Read more @ Linux Compatible
