Alpine/wolfssl: high 7.5
Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped the binding check performed for ticket-based resumption. A cached session could be resumed under a different SNI/
Action: Upgrade wolfssl to 5.9.2-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.15.0 | 5.9.2-r0 | - |
Fixed versions
| 5.9.2-r0 |
Sources
published · modified · JSON