Paul Kehrer discovered that OpenSSL incorrectly handled certain input lengths in EVP functions. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service (CVE-2021-23840). Tavis Ormandy discovered that OpenSSL incorrectly handled parsing issuer fields. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service (CVE-2021-23841).

OSVersionArchitecturePackageVersionFilename
Mageia7noarchopenssl< 1.1.0l-1.3openssl-1.1.0l-1.3.mga7
Mageia7noarchcompat-openssl10< 1.0.2u-1.2compat-openssl10-1.0.2u-1.2.mga7
Mageia8noarchopenssl< 1.1.1j-1openssl-1.1.1j-1.mga8

OS	Version	Architecture	Package	Version	Filename
Mageia	7	noarch	openssl	< 1.1.0l-1.3	openssl-1.1.0l-1.3.mga7
Mageia	7	noarch	compat-openssl10	< 1.0.2u-1.2	compat-openssl10-1.0.2u-1.2.mga7
Mageia	8	noarch	openssl	< 1.1.1j-1	openssl-1.1.1j-1.mga8