Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 415
Alerts This Week
Warning Icon 1 415

Fedora 24 glib-networking Security Update: Critical DoS Fix

fedora
Calendar Grey May 7, 2016
Dist Fedora Esm H88
Fedora 24 glib-networking patch addresses DoS vulnerability caused by excessive use of self-signed certificates in TLS connections.
Update to 2.48.1

Summary

This package contains modules that extend the networking support in

GIO. In particular, it contains libproxy- and GSettings-based

GProxyResolver implementations and a gnutls-based GTlsConnection

implementation.

Update Information:

Update to 2.48.1. Add patch for denial of service when TLS server sends the same self-signed certificate twice in a chain.

Change Log

References

Fedora Update Notification FEDORA-2016-5e897e9b85 2016-05-07 11:36:53.842040
Name : glib-networking Product : Fedora 24 Version : 2.48.1 Release : 1.fc24 URL : https://www.gnome.org/ Summary : Networking support for GLib Description : This package contains modules that extend the networking support in GIO. In particular, it contains libproxy- and GSettings-based GProxyResolver implementations and a gnutls-based GTlsConnection implementation.

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update glib-networking' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: glib-networking
Product: Fedora 24
Version: 2.48.1
Release: 1.fc24
Summary: Networking support for GLib

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.