Alpine/libressl: medium 5.3
LibreSSL 2.5.1 to 2.5.3 lacks TLS certificate verification if SSL_get_verify_result is relied upon for a later check of a verification result, in a use case where a user-provided verification callback
Action: Upgrade libressl to 2.5.3-r1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5.3-r1 | - |
Fixed versions
| 2.5.3-r1 |
Sources
published · modified · JSON