Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 41: FEDORA-2024-7d5c1bcc78 critical: openssl buffer overread

fedora
Calendar Grey September 21, 2024
Dist Fedora Esm H88
Ubuntu 22.10 release addresses critical kernel memory leak issue to bolster platform integrity and performance.
Fix CVE-2024-5535: SSL_select_next_proto buffer overread

Summary

The OpenSSL toolkit provides support for secure communications between

machines. OpenSSL includes a certificate management tool and shared

libraries which provide various cryptographic algorithms and

protocols.

Update Information:

Fix CVE-2024-5535: SSL_select_next_proto buffer overread

Topics%20covered

Topics Covered

security advisory security issue Fedora openssl buffer overread

Change Log

* Thu Sep 12 2024 Sahana Prasad - 1:3.2.2-7 - Fix CVE-2024-5535: SSL_select_next_proto buffer overread * Fri Sep 6 2024 Sahana Prasad - 1:3.2.2-6 - Patch for CVE-2024-6119

References

Fedora Update Notification FEDORA-2024-7d5c1bcc78 2024-09-21 00:15:33.562274 Name : openssl Product : Fedora 41 Version : 3.2.2 Release : 7.fc41 URL : http://www.openssl.org/ Summary : Utilities from the general purpose cryptography library with TLS implementation Description : The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-7d5c1bcc78' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: openssl
Product: Fedora 41
Version: 3.2.2
Release: 7.fc41
URL: http://www.openssl.org/
Summary: Utilities from the general purpose cryptography library with TLS implementation

Topics%20covered

Topics Covered

security advisory security issue Fedora openssl buffer overread

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here