Debian/botan: critical 9.8
Botan 2.2.0 - 2.4.0 (fixed in 2.5.0) improperly handled wildcard certificates and could accept certain certificates as valid for hostnames when, under RFC 6125 rules, they should not match. This only
Action: Upgrade botan to 2.4.0-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.0-5 | - |
Fixed versions
| 2.4.0-5 |
Sources
published · modified · JSON