tocsin

Alpine/wolfssl: unknown

When using RPK (Raw Public Key), the client side of a TLS 1.2, 1.3 and DTLS 1.2 connection could accept an unsolicited server_cert_type=RawPublicKey which allowed a malicious or misbehaving server to

Action: Upgrade wolfssl to 5.9.4-r0 or later.

Affected

introducedfixedlast affected
05.9.4-r0-

Fixed versions

5.9.4-r0

Sources

published · modified · JSON