Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 11 | syslog-ng | 3.28.1-2+deb11u2 |
Vulnerabilities 1
-
High 7.5
tranport: TLS host name wildcard matching too lax
syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be a…