MGASA-2020-0370
- Source
- https://advisories.mageia.org/MGASA-2020-0370.html
- Import Source
- https://advisories.mageia.org/MGASA-2020-0370.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2020-0370
- Related
- Published
- 2020-09-27T20:06:37Z
- Modified
- 2020-09-21T19:15:59Z
- Summary
- Updated mbedtls packages fix security vulnerabilities
- Details
-
mbedtls 2.16.8 fixes three security vulnerabilities which could affect earlier releases:
Local side channel attack on classical CBC decryption in (D)TLS (CVE-2020-16150).
Local side channel attack on RSA and static Diffie-Hellman.
Protocol weakness in DHE-PSK key exchange.
- References
-
- https://advisories.mageia.org/MGASA-2020-0370.html
- https://bugs.mageia.org/show_bug.cgi?id=27282
- https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-09-1
- https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-09-2
- https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-09-3
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:7 / mbedtls
Package
- Name
- mbedtls
- Purl
- pkg:rpm/mageia/mbedtls?distro=mageia-7