Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 41 gnutls DoS Fix FEDORA-2025-a62f1e771c critical: remote attack

fedora
Calendar Grey February 20, 2025
Dist Fedora Esm H88
OpenSSL has released a patch addressing a critical remote exploit vulnerability for Ubuntu 22.04. Essential update specifics outlined.
Update gnutls to the latest upstream release, including a fix for CVE-2024-12243.

Summary

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS

protocols and technologies around them. It provides a simple C language

application programming interface (API) to access the secure communications

protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and

other required structures.

Update Information:

Update gnutls to the latest upstream release, including a fix for CVE-2024-12243.

Topics%20covered

Topics Covered

security advisory security issue update Fedora DoS security fix remote attack software fix gnutls

Change Log

* Tue Feb 18 2025 Daiki Ueno - 3.8.9-2 - Switch from liboqs to leancrypto * Tue Feb 18 2025 Daiki Ueno - 3.8.9-1 - Update to gnutls 3.8.9 release

References


[ 1 ] Bug #2344617 - CVE-2024-12243 gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2344617

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-a62f1e771c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: gnutls
Product: Fedora 41
Version: 3.8.9
Release: 2.fc41
URL: http://www.gnutls.org/
Summary: A TLS protocol implementation

Topics%20covered

Topics Covered

security advisory security issue update Fedora DoS security fix remote attack software fix gnutls

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here