Security fix for the ALT Linux 10 package gnutls30 version 3.6.15-alt2

March 22, 2021 Mikhail Efremov 3.6.15-alt2 - Fixed gnulib tests. - Fixed CVE-2021-20231, CVE-2021-20232 fixes: CVE-2021-20231, CVE-2021-20232. - Fixed testpkcs11. - Dropped self-provide from devel subpackage...

[ASA-202103-1] gnutls: arbitrary code execution

Arch Linux Security Advisory ASA-202103-1 ========================================= Severity: Low Date : 2021-03-13 CVE-ID : CVE-2021-20231 CVE-2021-20232 Package : gnutls Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1674 Summary ======= The package gnutl...

CVE-2021-20232

A vulnerability in GnuTLS (CVE-2021-20232) stems from a use-after-free in client_send_params (lib/ext/pre_shared_key.c), which may cause memory corruption and other consequences. The issue is within the GnuTLS library, affecting TLS 1.3 client handling of pre_shared_key extensions. Documented imp...

CVE-2019-20232

CVE-2019-20232 is rejected; this candidate number is not used and does not represent an active vulnerability entry.

Product update: Virtuozzo Infrastructure Platform 2.5 Update 4 (2.5.0-1614)

This update provides stability and usability fixes. Vulnerability id: VSTOR-14144, VSTOR-20526 Blink button in the admin panel was not working in some cases. Vulnerability id: VSTOR-20197 Unable to create network bonds. Vulnerability id: VSTOR-20232 Disk replacement occasionally does not allow to...

CVE-2018-20232

CVE-2018-20232 affects Atlassian Jira: the labels widget gadget is vulnerable to cross-site scripting (XSS) due to improper handling of content rendered from a URL location that could be controlled via the up_projectid widget setting. Affected Jira versions are before 7.6.11 and 7.7.0 up to 7.13....