Sign In

Forgot your password?

Not a Member Yet?

Become a full participant in the LinuxSecurity.com community of open source security experts - not just an onlooker.

Contribute

MGASA-2021-0284 - Updated tunnel packages fix security vulnerability

Publication date: 23 Jun 2021
URL: https://advisories.mageia.org/MGASA-2021-0284.html
Type: security
Affected Mageia releases: 7
CVE: CVE-2021-20230

Updated stunnel package fixes security vulnerability:

Client certificate not correctly verified when redirect and verifyChain
options are used (CVE-2021-20230).

References:
- https://bugs.mageia.org/show_bug.cgi?id=28195
- https://access.redhat.com/errata/RHSA-2021:0618
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20230

SRPMS:
- 7/core/stunnel-5.57-1.mga7

Mageia 2021-0284: tunnel security update

Updated stunnel package fixes security vulnerability: Client certificate not correctly verified when redirect and verifyChain options are used (CVE-2021-20230)

Summary

CVE: CVE-2021-20230 Updated stunnel package fixes security vulnerability:
Client certificate not correctly verified when redirect and verifyChain options are used (CVE-2021-20230).