mbedTLS/PolarSSL -- multiple vulnerabilities

ARM Limited reports: Florian Weimar from Red Hat published on Lenstra's RSA-CRT attach for PKCS1 v1.5 signatures. These releases include countermeasures against that attack. Fabian Foerg of Gotham Digital Science found a possible client-side NULL pointer dereference, using the AFL Fuzzer. This...

mbedTLS/PolarSSL -- multiple vulnerabilities

ARM Limited reports: In order to strengthen the minimum requirements for connections and to protect against the Logjam attack, the minimum size of Diffie-Hellman parameters accepted by the client has been increased to 1024 bits. In addition the default size for the Diffie-Hellman parameters on th...

Fedora Update for mbedtls FEDORA-2015-9607

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for mbedtls FEDORA-2015-9625

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : mbedtls-1.3.11-1.fc20 (2015-9625)

Update to 1.3.11 This release is mainly fixing a number of outstanding issues and security fixes. Minor features have been added to enhance functionality and usability. Release notes: https://tls.mbed.org/tech-updates/releases/mbedtls-1.3.11-released Note that Tenable Network Security has...

Fedora 21 : mbedtls-1.3.11-1.fc21 (2015-9614)

Update to 1.3.11 This release is mainly fixing a number of outstanding issues and security fixes. Minor features have been added to enhance functionality and usability. Release notes: https://tls.mbed.org/tech-updates/releases/mbedtls-1.3.11-released Note that Tenable Network Security has...

Fedora Update for mbedtls FEDORA-2015-9614

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: mbedtls-1.3.11-1.fc20

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible. FOSS License Exception:...

Fedora 22 : mbedtls-1.3.11-1.fc22 (2015-9607)

Update to 1.3.11 This release is mainly fixing a number of outstanding issues and security fixes. Minor features have been added to enhance functionality and usability. Release notes: https://tls.mbed.org/tech-updates/releases/mbedtls-1.3.11-released Note that Tenable Network Security has...

[SECURITY] Fedora 22 Update: mbedtls-1.3.11-1.fc22

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible. FOSS License Exception:...

PT-2016-5688 · Openssl +3 · Polarssl +4

Name of the Vulnerable Software and Affected Versions: cURL and libcurl versions prior to 7.49.0 Description: The issue allows remote attackers to spoof servers via an arbitrary valid certificate when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address. This occurs...