FEDORA-2025-c7f4367479 — security update for openbao

stable

openbao-2.4.4-1.fc43

FEDORA-2025-c7f4367479 created by dwd 9 months ago for Fedora 43

update to upstream 2.4.4, fixing CVE-2025-64761.

Adds hsm tag.

The fedora-43 build was done with golang-1.25.4 which fixed CVE-2025-58189, CVE-2025-58188, CVE-2025-61725, CVE-2025-61723, CVE-2025-58185, and CVE-2025-58183.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-c7f4367479

This update has been submitted for testing by dwd.

9 months ago

This update's test gating status has been changed to 'ignored'.

9 months ago

This update has obsoleted openbao-2.4.3-2.fc43, and has inherited its bugs and notes.

9 months ago

This update has been pushed to testing.

9 months ago

dwd edited this update.

9 months ago

dwd edited this update.

9 months ago

This update has been submitted for stable by bodhi.

8 months ago

This update has been pushed to stable.

8 months ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

7 days

Dates

submitted

9 months ago

in testing

9 months ago

in stable

8 months ago

modified

9 months ago

approved

8 months ago

Builds

openbao-2.4.4-1.fc43

BZ#2408334 CVE-2025-58189 openbao: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43]

BZ#2408737 CVE-2025-61725 openbao: Excessive CPU consumption in ParseAddress in net/mail [fedora-43]

BZ#2409807 CVE-2025-61723 openbao: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43]

BZ#2410757 CVE-2025-58185 openbao: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43]

BZ#2411653 CVE-2025-58188 openbao: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-43]

BZ#2417146 CVE-2025-64761 openbao: OpenBao Privileged Operator Identity Group Root Escalation [fedora-43]

openbao-2.4.4-1.fc43

Automated Test Results

ignored