Advisories ยป MGASA-2021-0438

Updated curl packages fix security vulnerability

Publication date: 23 Sep 2021
Type: security
Affected Mageia releases : 8
CVE: CVE-2021-22945 , CVE-2021-22946 , CVE-2021-22947

Description

UAF and double-free in MQTT sending. (CVE-2021-22945)

Protocol downgrade required TLS bypassed. (CVE-2021-22946)

STARTTLS protocol injection via MITM. (CVE-2021-22947)
                

References

SRPMS

8/core