MGASA-2017-0030
Updated mbedtls packages fix security vulnerability
The mbedtls package has been updated to version 1.3.18, which removes a non-default configuration option that could lead to session key recovery in very long TLS sessions and fixes a potential stack corruption that cannot be triggered remotely. It also fixes several bugs.
See the upstream release announcement for details.
What each source reports
OSV No score
Updated mbedtls packages fix security vulnerability
The mbedtls package has been updated to version 1.3.18, which removes a non-default configuration option that could lead to session key recovery in very long TLS sessions and fixes a potential stack corruption that cannot be triggered remotely. It also fixes several bugs.
See the upstream release announcement for details.
- Record
MGASA-2017-0030- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mbedtlsMageia:5 |
before 1.3.18-1.mga5 | 1.3.18-1.mga5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2017-0030 is a vulnerability with no CVSS score yet in mbedtls, published January 29, 2017. No source lists public exploit code. Fixed in mbedtls 1.3.18-1.mga5.