tocsin

Debian/wolfssl: medium 6.5

In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server. This occurs when the sig_algo field differs between the certifi

Action: Upgrade wolfssl to 5.2.0-1 or later.

Affected

introducedfixedlast affected
05.2.0-1-

Fixed versions

5.2.0-1

Sources

published · modified · JSON