wolfssl before 3.2.0 does not properly issue certificates for a server's hostname.

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

References

• https://security-tracker.debian.org/tracker/CVE-2014-2901
• http://www.openwall.com/lists/oss-security/2014/04/18/2