Re: CVE Request: libesmtp does not check NULL bytes in commonName

[Ludwig Nussel <ludwig.nussel () suse de>]

Brian Stafford wrote:
> Ludwig Nussel wrote:
> > Brian Stafford wrote:
> >   
> > > I think the best approach is to apply Pawel's patch as this is the 
> >
> > I must have missed that patch. Could you re-post it?
> >   
> It's available at https://bugzilla.redhat.com/attachment.cgi?id=399131

Doesn't that lack a null byte check for subjAltNames?

cu
Ludwig

-- 
 (o_   Ludwig Nussel
 //\   
 V_/_  http://www.suse.de/
SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)