Critical Security Update for GnuTLS: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:20612: Important: gnutls security update. Affects gnutls versions < 3.8.10-4.el9_8. Fixed in 3.8.10-4.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
GnuTLS is a robust library that provides the implementation of cryptographic protocols such as SSL, TLS, and DTLS. It is widely used in various applications to secure communications over networks. The library is essential for ensuring data integrity and confidentiality, making it a critical component in many software systems. However, vulnerabilities in GnuTLS can lead to severe security risks, including data breaches and denial of service attacks.
Vulnerability Detail
The vulnerabilities in GnuTLS stem from several issues, including a flawed qsort comparator in DTLS reassembly, which can lead to crashes, and an underflow condition when processing DTLS datagrams. Additionally, there are concerns regarding RSA-PSK identity truncation, case-sensitivity in domain name comparisons, and intersecting empty name constraints. These vulnerabilities can result in denial of service attacks and potential exploitation by malicious actors, compromising the security of applications relying on GnuTLS.
How To Fix
Minimum fixed version
3.8.10-4.el9_8
This is the first release that contains the fix.
sudo dnf update gnutlsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can limit the use of GnuTLS in your applications until the update is applied. However, it is strongly recommended to apply the patch as soon as possible to mitigate the risks associated with these vulnerabilities.
Conclusion
The recent vulnerabilities identified in GnuTLS pose significant security risks that can affect a wide range of applications. It is crucial to update to the patched version 3.8.10-4.el9_8 to mitigate these risks. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time, ensuring your software remains secure.
See every vulnerability recorded for gnutls →
FAQ
GnuTLS is a library that implements cryptographic protocols such as SSL, TLS, and DTLS, providing secure communication over networks.
The vulnerabilities can lead to denial of service attacks, crashes, and potential exploitation by attackers, compromising the security of applications.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check your application without requiring any signup.
If immediate updates are not possible, consider limiting the use of GnuTLS in your applications as a temporary workaround.
Detailed information about the vulnerabilities can be found on the CVE pages listed in the related section of the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for gnutls.
