Advisories ยป MGASA-2018-0253

Updated mbedtls packages fix security issues

Publication date: 24 May 2018
Modification date: 24 May 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-9988 , CVE-2018-9989

Description

CVE-2018-9988: ARM mbed TLS before 2.1.11, before 2.7.2, and before
2.8.0 has a buffer over-read in ssl_parse_server_key_exchange() that
could cause a crash on invalid input.
CVE-2018-9989: ARM mbed TLS before 2.1.11, before 2.7.2, and before
2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could
cause a crash on invalid input.
                

References

SRPMS

6/core

6/tainted