MGASA-2021-0291

Source
https://advisories.mageia.org/MGASA-2021-0291.html
Import Source
https://advisories.mageia.org/MGASA-2021-0291.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2021-0291
Related
Published
2021-06-28T21:16:35Z
Modified
2021-06-28T20:03:36Z
Summary
Updated gnutls packages fix security vulnerabilities
Details

A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences (CVE-2021-20231).

A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential consequences (CVE-2021-20232).

References
Credits

Affected packages

Mageia:7 / gnutls

Package

Name
gnutls
Purl
pkg:rpm/mageia/gnutls?distro=mageia-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.15-1.1.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:8 / gnutls

Package

Name
gnutls
Purl
pkg:rpm/mageia/gnutls?distro=mageia-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.15-3.1.mga8

Ecosystem specific

{
    "section": "core"
}