Alpine/wolfssl: critical 9.1
Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the relevant key type, to be accepted by signature veri
Action: Upgrade wolfssl to 5.9.1-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.12.0 | 5.9.1-r0 | - |
Fixed versions
| 5.9.1-r0 |
Sources
published · modified · JSON