Описание
wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| wolfssl | fixed | 5.0.0-1 | package | |
| wolfssl | fixed | 4.6.0+p1-0+deb11u1 | bullseye | package |
Примечания
https://github.com/wolfSSL/wolfssl/commit/f93083be72a3b3d956b52a7ec13f307a27b6e093
EPSS
Связанные уязвимости
wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension.
wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension.
wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension.
ALT-PU-2021-2384: package `wolfssl` update to version 4.8.1-alt1
ALT-PU-2021-2325: package `wolfssl` update to version 4.8.1-alt1
EPSS