openSUSE-SU-2018:1041-1

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/openSUSE-SU-2018:1041-1

Related

Published

2018-04-20T16:37:28Z

Modified

2018-04-20T16:37:28Z

Summary

Security update for mbedtls

Details

This update for mbedtls fixes the following issues:

Security issues fixed:

CVE-2018-9988: Fixed buffer over-read in sslparseserverkeyexchange() that could cause a crash on invalid input (boo#1089022).
CVE-2018-9989: Fixed buffer over-read in sslparseserverpskhint() that could cause a crash on invalid input (boo#1089021).

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.19-14.1

{
    "binaries": [
        {
            "libmbedtls9": "1.3.19-14.1",
            "mbedtls-devel": "1.3.19-14.1"
        }
    ]
}