Updated mbedtls packages fix security issues

2018-05-2419:30:31

Gentoo Foundation

advisories.mageia.org

0.004 Low

EPSS

Percentile

72.7%

JSON

CVE-2018-9988: ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_key_exchange() that could cause a crash on invalid input. CVE-2018-9989: ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash on invalid input.

OSVersionArchitecturePackageVersionFilename
Mageia6noarchbctoolbox< 0.2.0-4.2bctoolbox-0.2.0-4.2.mga6
Mageia6noarchhiawatha< 10.4-1.2hiawatha-10.4-1.2.mga6
Mageia6noarchmbedtls< 2.7.3-1mbedtls-2.7.3-1.mga6
Mageia6noarchshadowsocks-libev< 3.1.0-1.2shadowsocks-libev-3.1.0-1.2.mga6
Mageia6noarchdolphin-emu< 5.0-5.2dolphin-emu-5.0-5.2.mga6.tainted

OS	Version	Architecture	Package	Version	Filename
Mageia	6	noarch	bctoolbox	< 0.2.0-4.2	bctoolbox-0.2.0-4.2.mga6
Mageia	6	noarch	hiawatha	< 10.4-1.2	hiawatha-10.4-1.2.mga6
Mageia	6	noarch	mbedtls	< 2.7.3-1	mbedtls-2.7.3-1.mga6
Mageia	6	noarch	shadowsocks-libev	< 3.1.0-1.2	shadowsocks-libev-3.1.0-1.2.mga6
Mageia	6	noarch	dolphin-emu	< 5.0-5.2	dolphin-emu-5.0-5.2.mga6.tainted