Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 40 Critical: FEDORA-2025-5e5783f0d1 GnuTLS Remote DoS

fedora
Calendar Grey February 26, 2025
Dist Fedora Esm H88
Ubuntu 24.04 has enhanced OpenSSL to mitigate a remote DoS threat labeled as CVE-2024-13056.
Update gnutls to the latest upstream release, including a fix for CVE-2024-12243.

Summary

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS

protocols and technologies around them. It provides a simple C language

application programming interface (API) to access the secure communications

protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and

other required structures.

Update Information:

Update gnutls to the latest upstream release, including a fix for CVE-2024-12243.

Topics%20covered

Topics Covered

security advisory security issue update critical Fedora remote DoS gnutls GnuTLS

Change Log

* Tue Feb 18 2025 Daiki Ueno - 3.8.9-1 - Update to gnutls 3.8.9 release

References


[ 1 ] Bug #2344616 - CVE-2024-12243 gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2344616

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-5e5783f0d1' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: gnutls
Product: Fedora 40
Version: 3.8.9
Release: 1.fc40
URL: http://www.gnutls.org/
Summary: A TLS protocol implementation

Topics%20covered

Topics Covered

security advisory security issue update critical Fedora remote DoS gnutls GnuTLS

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here