Alerts This Week
Warning Icon 1 566
Alerts This Week
Warning Icon 1 566

Fedora 40: FEDORA-2024-a3b517705e Critical: Micropython Buffer Overflow

fedora
Calendar Grey April 5, 2024
Dist Fedora Esm H88
Fedora 40 Release: micropython 1.22.2 addresses significant security vulnerabilities, bolstering user protection and maintaining software reliability.
Update to 1.22.2 Security fixes for CVE-2023-7158 and CVE-2023-7152

Summary

Implementation of Python 3 with very low memory footprint

Update Information:

Update to 1.22.2 Security fixes for CVE-2023-7158 and CVE-2023-7152

Change Log

* Fri Mar 22 2024 Charalampos Stratakis - 1.22.2-1 - Update to 1.22.2 - Security fixes for CVE-2023-7158 and CVE-2023-7152 - Fixes: rhbz#2256176, rhbz#2256178, rhbz#2259215 * Thu Jan 25 2024 Fedora Release Engineering - 1.21.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering - 1.21.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

References


[ 1 ] Bug #2256175 - CVE-2023-7158 MicroPython: heap-based buffer overflow https://bugzilla.redhat.com/show_bug.cgi?id=2256175 [ 2 ] Bug #2256177 - CVE-2023-7152 micropython: use after free vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=2256177

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-a3b517705e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: micropython
Product: Fedora 40
Version: 1.22.2
Release: 1.fc40
Summary: Implementation of Python 3 with very low memory footprint

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here