[SECURITY] Fedora 38 Update: mbedtls-2.28.7-1.fc38

🗓️ 22 Feb 2024 02:24:58Reported by FedoraType

fedora🔗 lists.fedoraproject.org👁 26 Views

Fedora 38 update for mbedtls-2.28.7-1.fc38, lightweight open source cryptographic and SSL/TLS library written in C, easy inclusion of cryptographic and SSL/TLS capabilities in (embedded) applications

Reporter	Title	Published	Views	Family All 94
AlpineLinux	CVE-2024-23170	31 Jan 202400:00	–	alpinelinux
AlpineLinux	CVE-2024-23775	31 Jan 202400:00	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in mbedtls	26 Jun 202413:32	–	astralinux
AstraLinux	Astra Linux – Vulnerability in mbedtls	26 Jun 202413:32	–	astralinux
BDU FSTEC	The vulnerability of the Mbed TLS software arises from a temporary lateral channel in private RSA operations, which allows attackers to execute the Marvin attack and gain access to confidential information.	16 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mbedtls_x509_set_extension function in Mbed TLS software allows a attacker to trigger a service failure.	16 Feb 202400:00	–	bdu_fstec
CBLMariner	CVE-2024-23775 affecting package hvloader for versions less than 1.0.1-6	27 Nov 202421:27	–	cbl_mariner
CBLMariner	CVE-2024-23170 affecting package hvloader for versions less than 1.0.1-6	27 Nov 202421:27	–	cbl_mariner
Circl	CVE-2024-23170	31 Jan 202409:32	–	circl
Circl	CVE-2024-23775	31 Jan 202409:32	–	circl