MGASA-2018-0038
- Source
- https://advisories.mageia.org/MGASA-2018-0038.html
- Import Source
- https://advisories.mageia.org/MGASA-2018-0038.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2018-0038
- Related
- Published
- 2018-01-03T14:22:14Z
- Modified
- 2018-01-03T13:51:59Z
- Summary
- Updated mbedtls packages fix security vulnerability
- Details
-
ARM mbed TLS before 1.3.21, 2.1.x before 2.1.9 and 2.x before 2.6.0, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates (CVE-2017-14032).
- References
-
- https://advisories.mageia.org/MGASA-2018-0038.html
- https://bugs.mageia.org/show_bug.cgi?id=21645
- https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2017-02
- https://tls.mbed.org/tech-updates/releases/mbedtls-2.6.0-2.1.9-and-1.3.21-released
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/BIDCXCILJ7BZS2GBSR75NMKRUNLQD3R5/
- Credits
-
-
- Mageia - COORDINATOR
-