CVE-2021-36377: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation.

Affected products

• Fedoraproject Fedora: version 34 only
• Fossil-Scm Fossil: before 2.14.2 (fixed in 2.14.2); from 2.15.0, before 2.15.2 (fixed in 2.15.2)

Published 2021-07-12. Last modified 2026-06-17.