ALT-PU-2021-3553: package mbedtls update to version 3.1.0-alt1
Описание
This update upgrades mbedtls to version 3.1.0-alt1.
Устраненные уязвимости3
Связанные уязвимости
ALT-PU-2022-2561: package `mbedtls` update to version 3.2.1-alt1
In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.
In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.
In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass ...
A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an input password's length is 0.