Lucene search

K
osvGoogleOSV:RLSA-2024:2570
HistoryMay 10, 2024 - 2:32 p.m.

Moderate: gnutls security update

2024-05-1014:32:36
Google
osv.dev
3
gnutls
security update
minerva
side-channel
chain building
crash
cvss
cve
ssl
tls
dtls
library

5.1 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.7%

The gnutls package provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

  • gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)

  • gnutls: potential crash during chain building/verification (CVE-2024-28835)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.