security: fix CVE-2021-33910, CVE-2021-3712

[aramase]

Signed-off-by: Anish Ramasekar anish.ramasekar@gmail.com

Reason for Change:

Fixes the following CVEs:

+-----------+------------------+----------+-------------------+------------------+--------------------------------------+
|  LIBRARY  | VULNERABILITY ID | SEVERITY | INSTALLED VERSION |  FIXED VERSION   |                TITLE                 |
+-----------+------------------+----------+-------------------+------------------+--------------------------------------+
| libssl1.1 | CVE-2021-3711    | HIGH     | 1.1.1d-0+deb10u6  | 1.1.1d-0+deb10u7 | openssl: SM2 Decryption              |
|           |                  |          |                   |                  | Buffer Overflow                      |
|           |                  |          |                   |                  | -->avd.aquasec.com/nvd/cve-2021-3711 |
+           +------------------+----------+                   +                  +--------------------------------------+
|           | CVE-2021-3712    | MEDIUM   |                   |                  | openssl: Read buffer overruns        |
|           |                  |          |                   |                  | processing ASN.1 strings             |
|           |                  |          |                   |                  | -->avd.aquasec.com/nvd/cve-2021-3712 |
+-----------+------------------+----------+-------------------+------------------+--------------------------------------+

Requirements

• squashed commits
• included documentation
• added unit tests and e2e tests (if applicable). See test standard for more details.
• ran make precommit

Issue Fixed:

Please answer the following questions with yes/no:

Does this change contain code from or inspired by another project? If so, did you notify the maintainers and provide attribution?

• yes
• no

Notes for Reviewers: