Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 634
Alerts This Week
Warning Icon 1 634

Fedora 40: FEDORA-2024-f69ecb0511 Critical: GnuTLS TLS Security Patch

fedora
Calendar Grey April 19, 2024
Dist Fedora Esm H88
The gnutls package updates in Fedora 40 enhance security by addressing critical vulnerabilities. Key insights from this advisory are vital for users.
Rebase gnutls to version 3.8.5 Rebase gnutls to version 3.8.4 - contains fixes for CVE-2024-28834 and CVE-2024-28835 Automatic update for gnutls-3.8.3-3.fc40.

Summary

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS

protocols and technologies around them. It provides a simple C language

application programming interface (API) to access the secure communications

protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and

other required structures.

Update Information:

Rebase gnutls to version 3.8.5 Rebase gnutls to version 3.8.4 - contains fixes for CVE-2024-28834 and CVE-2024-28835 Automatic update for gnutls-3.8.3-3.fc40.

Change Log

* Thu Apr 4 2024 Zoltan Fridrich - 3.8.5-1 - [packit] 3.8.5 upstream release * Wed Mar 20 2024 Zoltan Fridrich - 3.8.4-1 - [packit] 3.8.4 upstream release - Resolves rhbz#2270320 * Thu Feb 22 2024 Zoltan Fridrich - 3.8.3-3 - Fix mingw build failure

References


[ 1 ] Bug #2270320 - gnutls-3.8.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2270320 [ 2 ] Bug #2273364 - gnutls-3.8.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2273364

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-f69ecb0511' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: gnutls
Product: Fedora 40
Version: 3.8.5
Release: 1.fc40
Summary: A TLS protocol implementation

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.