Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 41: 2025-a13867ecbc critical: rust-openssl use-after-free

fedora
Calendar Grey April 17, 2025
Dist Fedora Esm H88
Important notice regarding OpenSSL package in Fedora 41: patching CVE-2025-3416 with enhanced version updates.
Update the openssl crate to version 0.10.72

Summary

OpenSSL bindings.

Update Information:

Update the openssl crate to version 0.10.72. Update the openssl-sys crate to version 0.9.107. This update addresses CVE-2025-3416 / RUSTSEC-2025-0022 (a possible use-after- free issue in two public functions). A survey of dependent packages in Fedora shows that none of them use the affected API, or do not use them in a way that triggers this issue.

Topics%20covered

Topics Covered

security advisory update Fedora openssl use-after-free binding

Change Log

* Tue Apr 8 2025 Fabio Valentini - 0.10.72-1 - Update to version 0.10.72; Fixes RHBZ#2357489

References

Fedora Update Notification FEDORA-2025-a13867ecbc 2025-04-17 19:46:50.126435+00:00 Name : rust-openssl Product : Fedora 41 Version : 0.10.72 Release : 1.fc41 URL : https://crates.io/crates/openssl Summary : OpenSSL bindings Description : OpenSSL bindings.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-a13867ecbc' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: rust-openssl
Product: Fedora 41
Version: 0.10.72
Release: 1.fc41
URL: https://crates.io/crates/openssl
Summary: OpenSSL bindings

Topics%20covered

Topics Covered

security advisory update Fedora openssl use-after-free binding

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here