Fedora Linux has rolled out significant security updates, specifically addressing vulnerabilities in two packages: `perl-Crypt-CBC` and `unbound`.
- Version: 3.07-1.fc41 for Fedora 41 and 3.07-1.fc42 for Fedora 42.
- Description: A Perl implementation for encrypting data using Cipher Block Chaining (CBC) mode, compatible with various block ciphers.
- Security Fix: The update resolves a critical issue (CVE-2025-2814) where the library was fallbacking to an insecure random number generator if `/dev/urandom` was not accessible. The update now uses the `Crypt::URandom` module for better security.
2. unbound:
- Version: 1.23.1-1.fc41.
- Description: A validating, recursive, and caching DNSSEC resolver developed by NLnet Labs, designed with modular components for DNSSEC validation.
- Update Information: This version update addresses various bugs and includes enhancements to the resolver's functionality.
- For `perl-Crypt-CBC`: `su -c 'dnf upgrade --advisory FEDORA-2025-1d22f55c40'`
- For `unbound`: `su -c 'dnf upgrade --advisory FEDORA-2025-e262093d58'`
- Detailed changelogs and references to the security bugs can be found in the update notifications.
Updates Overview:
1. perl-Crypt-CBC:- Version: 3.07-1.fc41 for Fedora 41 and 3.07-1.fc42 for Fedora 42.
- Description: A Perl implementation for encrypting data using Cipher Block Chaining (CBC) mode, compatible with various block ciphers.
- Security Fix: The update resolves a critical issue (CVE-2025-2814) where the library was fallbacking to an insecure random number generator if `/dev/urandom` was not accessible. The update now uses the `Crypt::URandom` module for better security.
2. unbound:
- Version: 1.23.1-1.fc41.
- Description: A validating, recursive, and caching DNSSEC resolver developed by NLnet Labs, designed with modular components for DNSSEC validation.
- Update Information: This version update addresses various bugs and includes enhancements to the resolver's functionality.
Installation Instructions:
Users can install these updates via the command line using the `dnf` package manager. For example:- For `perl-Crypt-CBC`: `su -c 'dnf upgrade --advisory FEDORA-2025-1d22f55c40'`
- For `unbound`: `su -c 'dnf upgrade --advisory FEDORA-2025-e262093d58'`
Additional Notes:
- All packages are signed with the Fedora Project GPG key to ensure integrity and authenticity. Users are encouraged to verify the keys [here](https://fedoraproject.org/keys).- Detailed changelogs and references to the security bugs can be found in the update notifications.
Conclusion:
These updates highlight Fedora's commitment to maintaining security and stability in its operating system. Users should promptly apply these updates to mitigate potential vulnerabilities in their systems. Regular updates and security patches are vital for safeguarding against emerging threats in the software ecosystemperl-Crypt-CBC and Unbound updates for Fedora
Fedora Linux has been updated with security enhancements, which include perl-Crypt-CBC and unbound:
Fedora 41 Update: perl-Crypt-CBC-3.07-1.fc41
Fedora 41 Update: unbound-1.23.1-1.fc41
Fedora 42 Update: perl-Crypt-CBC-3.07-1.fc42perl-Crypt-CBC and Unbound updates for Fedora @ Linux Compatible
