tocsin

Debian/openfortivpn: medium 5.3

An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509_check_host negative error code is interpreted as a succ

Action: Upgrade openfortivpn to 1.12.0-1 or later.

Affected

introducedfixedlast affected
01.12.0-1-

Fixed versions

1.12.0-1

Sources

published · modified · JSON