MGASA-2021-0291
- Source
- https://advisories.mageia.org/MGASA-2021-0291.html
- Import Source
- https://advisories.mageia.org/MGASA-2021-0291.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2021-0291
- Upstream
- Published
- 2021-06-28T21:16:35Z
- Modified
- 2026-04-16T00:11:59Z
- Summary
- Updated gnutls packages fix security vulnerabilities
- Details
-
A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences (CVE-2021-20231).
A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences (CVE-2021-20232).
- References
-
- https://advisories.mageia.org/MGASA-2021-0291.html
- https://bugs.mageia.org/show_bug.cgi?id=29021
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/OSLAE6PP33A7VYRYMYMUVB3U6B26GZER/
- https://www.gnutls.org/security-new.html#GNUTLS-SA-2021-03-10
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LUDG7BXPVVVALM2YUCJ2EKIRBHFXMY75/
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:7 / gnutls
Package
- Name
- gnutls
- Purl
- pkg:rpm/mageia/gnutls?arch=source&distro=mageia-7
Mageia:8 / gnutls
Package
- Name
- gnutls
- Purl
- pkg:rpm/mageia/gnutls?arch=source&distro=mageia-8