tocsin

Debian/syslog-ng: high 7.5

syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcar

Action: Upgrade syslog-ng to 3.38.1-5+deb12u1 or later.

Affected

introducedfixedlast affected
03.38.1-5+deb12u1-

Fixed versions

3.38.1-5+deb12u1

Sources

published · modified · JSON