libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.

OSVersionArchitecturePackageVersionFilename
Debian12allcurl< 7.83.1-1curl_7.83.1-1_all.deb
Debian11allcurl< 7.74.0-1.3+deb11u2curl_7.74.0-1.3+deb11u2_all.deb
Debian10allcurl< 7.64.0-4+deb10u3curl_7.64.0-4+deb10u3_all.deb
Debian999allcurl< 7.83.1-1curl_7.83.1-1_all.deb
Debian13allcurl< 7.83.1-1curl_7.83.1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	curl	< 7.83.1-1	curl_7.83.1-1_all.deb
Debian	11	all	curl	< 7.74.0-1.3+deb11u2	curl_7.74.0-1.3+deb11u2_all.deb
Debian	10	all	curl	< 7.64.0-4+deb10u3	curl_7.64.0-4+deb10u3_all.deb
Debian	999	all	curl	< 7.83.1-1	curl_7.83.1-1_all.deb
Debian	13	all	curl	< 7.83.1-1	curl_7.83.1-1_all.deb