Comment 1 for bug 1879533

Revision history for this message
Marc Deslauriers (mdeslaur) wrote : Re: busybox does not verify TLS connections with CONFIG_FEATURE_WGET_OPENSSL=y config option

This is already known as CVE-2018-1000500

This is what upstream did:

https://git.busybox.net/busybox/commit/networking/wget.c?id=0972c7f7a570c38edb68e1c60a45614b7a7c7d55