[Bug 1086778] VUL-0: CVE-2018-8970: libressl: The int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c inLibreSSL 2.7.0 before 2.7.1 does not support a certain special case of a zeroname length, which causes silent omission of hostname verification

http://bugzilla.opensuse.org/show_bug.cgi?id=1086778 http://bugzilla.opensuse.org/show_bug.cgi?id=1086778#c4 --- Comment #4 from OBSbugzilla Bot <bwiedemann+obsbugzillabot@suse.com> --- This is an autogenerated message for OBS integration: This bug (1086778) was mentioned in https://build.opensuse.org/request/show/977615 Backports:SLE-15-SP3 / libressl https://build.opensuse.org/request/show/977616 Backports:SLE-15-SP4 / libressl -- You are receiving this mail because: You are on the CC list for the bug.