Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 8 - MGASA-2021-0540: Critical Nginx/Vsftpd TLS Auth Issue

mageia
Calendar Grey December 8, 2021
Dist Mageia Esm H88
Mageia 2021-0540 addresses security flaws in Nginx and Vsftpd, implementing updates that improve TLS authentication mechanisms.
ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication References: - https://bugs.mageia.org/show_bug.cgi?id=29220

Summary

ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication

References

- https://bugs.mageia.org/show_bug.cgi?id=29220

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/44SPREQ2R4IE2VUUO2HVCFTUGDCYSXAD/

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/TKXMYKALTHIBJLDHQPBKNQK2FWVOSIG7/

- https://www.cve.org/CVERecord?id=CVE-2021-3618

Topics%20covered

Topics Covered

security advisory nginx vsftpd application layer Mageia TLS authentication

Resolution

SRPMS

- 8/core/nginx-1.18.0-5.2.mga8

- 8/core/vsftpd-3.0.5-1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 08 Dec 2021
URL: https://advisories.mageia.org/MGASA-2021-0540.html
Type: security
CVE: CVE-2021-3618

Topics%20covered

Topics Covered

security advisory nginx vsftpd application layer Mageia TLS authentication

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here