Debian/wolfssl: high 7.5
In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can simply omit the certificate_verify message from the handshake, and never present
Action: Upgrade wolfssl to 5.2.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.2.0-1 | - |
Fixed versions
| 5.2.0-1 |
Sources
published · modified · JSON