CVE-2024-47619

syslog-ng is an enhanced log daemo. Prior to version 4.8.2, "tlswildcardmatch" matches on certificates such as "foo..bar" although that is not allowed. It is also possible to pass partial wildcards such as "foo.ac.bar" which glib matches but should be avoided / invalidated. This issue could have ...

CVE-2024-47619: Improper Certificate Validation

syslog-ng is an enhanced log daemo. Prior to version 4.8.2, tlswildcardmatch matches on certificates such as foo..bar although that is not allowed. It is also possible to pass partial wildcards such as foo.ac.bar which glib matches but should be avoided / invalidated. This issue could have an...