Debian/wolfssl: critical 9.1
Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the relevant key type, to be accepted by signature veri
Action: Upgrade wolfssl to 5.7.2-0.1+deb13u2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.7.2-0.1+deb13u2 | - |
Fixed versions
| 5.7.2-0.1+deb13u2 |
Sources
- osv: DEBIAN-CVE-2026-5194#Debian:13/wolfssl
- https://security-tracker.debian.org/tracker/CVE-2026-5194
published · modified · JSON