tocsin

Debian/wget: unknown

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL

Action: Upgrade wget to 1.12-1 or later.

Affected

introducedfixedlast affected
01.12-1-

Fixed versions

1.12-1

Sources

published · modified · JSON