]> git.ipfire.org Git - thirdparty/squid.git/commit
Fix validation of certificates with CN=* (#1523)
authorAndreas Weigel <andreas.weigel@securepoint.de>
Wed, 18 Oct 2023 04:14:31 +0000 (04:14 +0000)
committerAmos Jeffries <yadij@users.noreply.github.com>
Fri, 20 Oct 2023 06:15:35 +0000 (19:15 +1300)
commit792ef23e6e1c05780fe17f733859eef6eb8c8be3
tree2368cd3b009e210d2eca6ff0abc16c1cd4c5f376
parent052cf082b0faaef4eaaa4e94119d7a1437aac4a3
Fix validation of certificates with CN=* (#1523)

The bug was discovered and detailed by Joshua Rogers at
https://megamansec.github.io/Squid-Security-Audit/
where it was filed as "Buffer UnderRead in SSL CN Parsing".
src/anyp/Uri.cc