Debian/openfortivpn: critical 9.1
An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostname comparisons do not consider '\0' characters, as demonstr
Action: Upgrade openfortivpn to 1.12.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.0-1 | - |
Fixed versions
| 1.12.0-1 |
Sources
published · modified · JSON