Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Fedora 22: 2015-5131 Important GnuTLS TLS Security Update Available

fedora
Calendar Grey April 21, 2015
Scroller Fedora
Important gnutls patch for Fedora 22 fixes issues and enhances secure interactions.
new upstream release

Summary

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS

protocols and technologies around them. It provides a simple C language

application programming interface (API) to access the secure communications

protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and

other required structures.

Update Information:

new upstream release

Topics%20covered

Topics Covered

security advisory critical Fedora gnuTLS TLS fix

Change Log

References


[ 1 ] Bug #1131461 - gnutls fails to load BER-encoded PKCS #12 files https://bugzilla.redhat.com/show_bug.cgi?id=1131461 [ 2 ] Bug #1212463 - CVE-2015-3308 gnutls: use-after-free flaw in CRL distribution points parsing [fedora-21] https://bugzilla.redhat.com/show_bug.cgi?id=1212463

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update gnutls' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: gnutls
Product: Fedora 22
Version: 3.3.14
Release: 1.fc22
URL: http://www.gnutls.org/
Summary: A TLS protocol implementation

Topics%20covered

Topics Covered

security advisory critical Fedora gnuTLS TLS fix

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.