PT-2026-64277

Apereo CAS Client accepts any CA-trusted certificate for any hostname, provided the URL the client is calling matches the configured allowlist or regex. An attacker with a MITM position DNS poisoning, rogue Wi-Fi, malicious proxy, etc. can provide any CA-signed certificate for a hostname that...

CLSA-2026-1774261838 tomcat: Fix of CVE-2025-66614

CVE-2025-66614: add protocol host name and SNI host name matching...

SUSE-SU-2015:1298-1 Security update for python-setuptools

the following issue was fixed by this update: Non-RFC6125-compliant host name matching was incorrect CVE-2013-7440 bnc930189...

openSUSE Security Update : python-setuptools (openSUSE-2015-413)

Python-setup tools was updated to fix one security issues. The following vulnerability was fixed : - non-RFC6125-compliant host name matching - substring wildcard should not match IDNA prefix booc930189 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...