Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 38: 2023-f9ab870391 Critical: OpenSSL Vulnerability Patch

fedora
Calendar Grey October 26, 2023
Dist Fedora Esm H88
Important patch released for mbedtls version 2.28.5 tackling CVE-2023-43615 vulnerability in Fedora 37.
- Update to 2.28.5 - CVE-2023-43615 Release notes: TLS/mbedtls/releases/tag/mbedtls-2.28.5 Security Advisory: - tls.readthedocs.io/en/latest/security-advisories/mbedtls-security- a...

Summary

Mbed TLS is a light-weight open source cryptographic and SSL/TLS

library written in C. Mbed TLS makes it easy for developers to include

cryptographic and SSL/TLS capabilities in their (embedded)

applications with as little hassle as possible.

Update Information:

- Update to 2.28.5 - CVE-2023-43615 Release notes: TLS/mbedtls/releases/tag/mbedtls-2.28.5 Security Advisory: - tls.readthedocs.io/en/latest/security-advisories/mbedtls-security- advisory-2023-10-1/

Change Log

* Tue Oct 10 2023 Morten Stevens - 2.28.5-1 - Update to 2.28.5

References

Fedora Update Notification FEDORA-2023-e0ab860391 2023-10-26 01:34:25.902642 Name : mbedtls Product : Fedora 37 Version : 2.28.5 Release : 1.fc37 URL : https://www.trustedfirmware.org/projects/mbed-tls Summary : Light-weight cryptographic and SSL/TLS library Description : Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their (embedded) applications with as little hassle as possible.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-e0ab860391' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: mbedtls
Product: Fedora 37
Version: 2.28.5
Release: 1.fc37
Summary: Light-weight cryptographic and SSL/TLS library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here