testing

openbao-2.5.0-1.el8

FEDORA-EPEL-2026-5e10141457 created by dwd a week ago for Fedora EPEL 8

Update to upstream openbao-2.5.0. Also fixes CVE-2025-58189, CVE-2025-61723, CVE-2025-61725, CVE-2025-58183, CVE-2025-58185, CVE-2025-58188 on epel-8.

This update has been submitted for testing by dwd.

a week ago

This update's test gating status has been changed to 'ignored'.

a week ago

dwd edited this update.

a week ago

This update has been pushed to testing.

6 days ago

dwd edited this update.

5 days ago

Please log in to add feedback.

Metadata
Type
security
Severity
medium
Karma
0
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
disabled
Stable by Time
disabled
Thresholds
Minimum Karma
+1
Minimum Testing
7 days
Dates
submitted
a week ago
in testing
6 days ago
days to stable
1
modified
5 days ago
Builds
1
openbao-2.5.0-1.el8
BZ#2407513 CVE-2025-58189 openbao: go crypto/tls ALPN negotiation error contains attacker controlled information [epel-8]
0
0
BZ#2408542 CVE-2025-61725 openbao: Excessive CPU consumption in ParseAddress in net/mail [epel-8]
0
0
BZ#2408965 CVE-2025-61723 openbao: Quadratic complexity when parsing some invalid inputs in encoding/pem [epel-8]
0
0
BZ#2409907 CVE-2025-58185 openbao: Parsing DER payload can cause memory exhaustion in encoding/asn1 [epel-8]
0
0
BZ#2410847 CVE-2025-58188 openbao: Panic when validating certificates with DSA public keys in crypto/x509 [epel-8]
0
0
BZ#2412489 CVE-2025-58183 openbao: Unbounded allocation when parsing GNU sparse map [epel-all]
0
0
openbao-2.5.0-1.el8

Automated Test Results

Copyright © 2007-2026 Red Hat, Inc. and others.

Running bodhi-server 25.11.3 on bodhi-web-16-g8xnq.

bodhi is Free Software. Please file issues if you have any problems. Read the documentation.

• Composes • Legal • Privacy policy •