You are here
Home > Preporuke > Sigurnosni nedostaci programskog paketa yubihsm

Sigurnosni nedostaci programskog paketa yubihsm

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

Fedora Update Notification
2020-10-29 01:04:57.850474

Name : yubihsm-shell
Product : Fedora 33
Version : 2.0.3
Release : 1.fc33
Summary : Tools to interact with YubiHSM 2
Description :
This package contains most of the components used to interact with
the YubiHSM 2 at both a user-facing and programmatic level.

Update Information:

New upstream release (#1889941). It turned out to be security release, so added
the security bugs.

* Wed Oct 21 2020 Jakub Jelen <> – 2.0.3-1
– New upstream release (#1889941)

[ 1 ] Bug #1890203 – CVE-2020-24387 yubihsm-shell: yh_create_session() does not explicitly check the returned session id could result in DoS
[ 2 ] Bug #1890205 – CVE-2020-24388 yubihsm-shell: _send_secure_msg() does not validate the embedded length field of a message which could result in DoS

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2020-8afd443d46’ at the command
line. For more information, refer to the dnf documentation available at

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
package-announce mailing list —
To unsubscribe send an email to
Fedora Code of Conduct:
List Guidelines:
List Archives:

AutorBruno Varga
Cert idNCERT-REF-2020-10-0001-ADV
More in Preporuke
Sigurnosni nedostaci programskog paketa tcpreplay

Otkriveni su sigurnosni nedostaci u programskom paketu tcpreplay za operacijski sustav Fedora. Otkriveni nedostaci potencijalnim napadačima omogućuju izazivanje DoS stanja....