Alerts This Week
Warning Icon 1 1,213
Alerts This Week
Warning Icon 1 1,213

Fedora 41: 2025-36c626e871 critical: mbedtls denial of service

fedora
Calendar Grey May 18, 2025
Dist Fedora Esm H88
Fedora 41 enhances micropython to 1.25.0, resolving significant security vulnerabilities related to mbedtls concerns.
Update to 1.25.0

Summary

Implementation of Python 3 with very low memory footprint

Update Information:

Update to 1.25.0

Topics%20covered

Topics Covered

security advisory denial of service software update Fedora mbedtls Python implementation

Change Log

* Fri May 9 2025 Charalampos Stratakis - 1.25.0-1 - Update to 1.25.0 - Security fixes for CVE-2023-52353 and CVE-2024-23744 in mbedtls - Fix FTBFS with GCC 15 Resolves: rhbz#2359781, rhbz#2259505, rhbz#2259499, rhbz#2340849 * Fri Jan 17 2025 Fedora Release Engineering - 1.24.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild

References


[ 1 ] Bug #2259499 - CVE-2024-23744 micropython: mbedtls: persistent handshake denial if a client sends a TLS [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2259499 [ 2 ] Bug #2259505 - CVE-2023-52353 micropython: mbedtls: the maximum negotiable TLS version is mishandled. [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2259505 [ 3 ] Bug #2340849 - micropython: FTBFS in Fedora rawhide/f42 https://bugzilla.redhat.com/show_bug.cgi?id=2340849 [ 4 ] Bug #2359781 - micropython-1.25.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2359781

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-36c626e871' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: micropython
Product: Fedora 41
Version: 1.25.0
Release: 1.fc41
URL: http://micropython.org/
Summary: Implementation of Python 3 with very low memory footprint

Topics%20covered

Topics Covered

security advisory denial of service software update Fedora mbedtls Python implementation

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here