Stay Secure with the Latest Linux Advisories

security advisorycriticalpowerpc

Mageia 9 MGASA-2024-0036 Critical Quictls Security Threat

The updated packages fix security vulnerabilities: Excessive time spent in DH check / generation with large Q parameter value. (CVE-2023-5678) POLY1305 MAC implementation corrupts vector registers on PowerPC. (CVE-2023-6129) . MGASA-2024-0036 - Updated quictls packages fix security vulnerabilities Publication date: 14 Feb 2024 URL: https://advisories.mageia.org/MGASA-2024-0036.html Type: security Affected Mageia releases: 9 CVE: CVE-2023-5678, CVE-2023-6129, CVE-2023-6237, CVE-2024-0727 The updated packages fix security vulnerabilities: Excessive time spent in DH check / generation with large Q parameter value. (CVE-2023-5678) POLY1305 MAC implementation corrupts vector registers on PowerPC. (CVE-2023-6129) Excessive time spent checking invalid RSA public keys. (CVE-2023-6237) PKCS12 Decoding crashes. (CVE-2024-0727) References: - https://bugs.mageia.org/show_bug.cgi?id=32794 - https://bugs.mageia.org/show_bug.cgi?id=32498 - https://openssl-library.org/news/secadv/20231106.txt - https://openssl-library.org/news/secadv/20240109.txt - https://openssl-library.org/news/secadv/20240115.txt - https://openssl-library.org/news/secadv/20240125.txt - https://www.cve.org/CVERecord?id=CVE-2023-5678 - https://www.cve.org/CVERecord?id=CVE-2023-6129 - https://www.cve.org/CVERecord?id=CVE-2023-6237 - https://www.cve.org/CVERecord?id=CVE-2024-0727 SRPMS: - 9/core/quictls-3.0.12-1.1.mga9 . Recent updates to quictls packages tackle vulnerabilities that lead to prolonged computation durations and problems with vector registers on PowerPC architectures.. Mageia Security Update, Quictls Fix, PowerPC Advisory. . Severity: Critical. LinuxSecurity.com Team

Feb 14, 2024 •Critical Mageia