Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 31: 2020-48a1ae610c moderate: mbedtls local DoS Issue

fedora
Calendar Grey September 16, 2020
Dist Fedora Esm H88
Fedora 31's Mbed TLS 2.16.8 update mitigates vulnerabilities related to local side channel attacks. Read more for specifics.
- Update to 2.16.8

Summary

Mbed TLS is a light-weight open source cryptographic and SSL/TLS

library written in C. Mbed TLS makes it easy for developers to include

cryptographic and SSL/TLS capabilities in their (embedded)

applications with as little hassle as possible.

FOSS License Exception: https://www.trustedfirmware.org/projects/mbed-tls/

- Update to 2.16.8

* Tue Sep 8 2020 Morten Stevens - 2.16.8-1

- Update to 2.16.8

* Thu Aug 20 2020 Morten Stevens - 2.16.7-4

- Switch to cmake_build, cmake_install and ctest

- FTBFS in Fedora rawhide/f33 (#1864124)

* Sat Aug 1 2020 Fedora Release Engineering - 2.16.7-3

- Second attempt - Rebuilt for

https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

* Tue Jul 28 2020 Fedora Release Engineering - 2.16.7-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[ 1 ] Bug #1875047 - CVE-2020-16150 mbedtls: local side channel attack on classical CBC decryption in (D)TLS

https://bugzilla.redhat.com/show_bug.cgi?id=1875047

su -c 'dnf upgrade --advisory FEDORA-2020-48a1ae610c' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
important
Lowest
Low
Medium
High
Critical

Product: Fedora 31
Version: 2.16.8
Release: 1.fc31
Summary: Light-weight cryptographic and SSL/TLS library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here