Summary: |
<net-ftp/lftp-4.6.2:incorrectly validates wildcard SSL certificates containing literal IP addresses using code borrowed from libcurl (CVE-2014-0139) |
Product: |
Gentoo Security
|
Reporter: |
Jeroen Roovers (RETIRED) <jer> |
Component: |
Vulnerabilities | Assignee: |
Gentoo Security <security> |
Status: |
RESOLVED
FIXED
|
|
|
Severity: |
normal
|
CC: |
jer
|
Priority: |
Normal
|
|
|
Version: |
unspecified | |
|
Hardware: |
All | |
|
OS: |
Linux | |
|
URL: |
http://comments.gmane.org/gmane.network.lftp.user/2699
|
Whiteboard: |
B4 [noglsa] |
Package list:
|
|
Runtime testing required:
|
---
|
Bug Depends on: |
536036
|
|
|
Bug Blocks: |
|
|
|