MGASA-2022-0017

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2022-0017.html

Import Source

https://advisories.mageia.org/MGASA-2022-0017.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2022-0017

Related

CVE-2021-44732

Published

2022-01-15T08:09:56Z

Modified

2022-01-15T07:22:54Z

Summary

Updated mbedtls packages fix security vulnerability

Details

This update provides Mbed TLS 2.16.12, with a number of bug fixes and a security fix. Mbed TLS has a double free in certain out-of-memory conditions, as demonstrated by an mbedtlssslset_session() failure. (CVE-2021-44732)

References

https://advisories.mageia.org/MGASA-2022-0017.html
https://bugs.mageia.org/show_bug.cgi?id=29866
https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.12
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2021-12

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

MGASA-2022-0017

Affected packages