Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2020-3502

Высокий

ALT-PU-2020-3502: package mbedtls update to version 2.25.0-alt1

Источник
errata.altlinux.org
Дата публикации
12.12.2020
Дата обновления
12.12.2020
Устраненные уязвимости
4

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades mbedtls to version 2.25.0-alt1.

Устраненные уязвимости4

Связанные уязвимости

CVSS3: 7.5
altlinux
больше 5 лет назад

ALT-PU-2021-4971: package `mbedtls13` update to version 2.26.0-alt3

CVSS3: 7.5
ubuntu
около 5 лет назад

An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.

CVSS3: 7.5
nvd
около 5 лет назад

An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.

msrc
9 месяцев назад

An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.

CVSS3: 7.5
debian
около 5 лет назад

An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 L ...