Debian/mbedtls: critical 9.8
Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure.
Action: Upgrade mbedtls to 2.28.0-0.3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.28.0-0.3 | - |
Fixed versions
| 2.28.0-0.3 |
Sources
published · modified · JSON