Alpine/botan: critical 9.8
Botan 2.2.0 - 2.4.0 (fixed in 2.5.0) improperly handled wildcard certificates and could accept certain certificates as valid for hostnames when, under RFC 6125 rules, they should not match. This only
Action: Upgrade botan to 2.5.0-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.2.0 | 2.5.0-r0 | - |
Fixed versions
| 2.5.0-r0 |
Sources
published · modified · JSON