MGASA-2020-0265

Source
https://advisories.mageia.org/MGASA-2020-0265.html
Import Source
https://advisories.mageia.org/MGASA-2020-0265.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2020-0265
Related
Published
2020-06-16T07:45:15Z
Modified
2020-06-16T07:06:19Z
Summary
Updated mbedtls packages fix security vulnerability
Details

Updated mbedtls packages fix security vulnerability

Fix side channel in ECC code that allowed an adversary with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) to fully recover an ECDSA private key. (CVE-2020-10932)

Fix a potentially remotely exploitable buffer overread in a DTLS client when parsing the Hello Verify Request message.

References
Credits

Affected packages