Debian/wolfssl: critical 9.1
Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the relevant key type, to be accepted by signature veri
Action: Upgrade wolfssl to 5.5.4-2+deb12u3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.5.4-2+deb12u3 | - |
Fixed versions
| 5.5.4-2+deb12u3 |
Sources
published · modified · JSON