Fedora 42 gnutls Critical Denial of Service CVE-2026-1584 Advisory

Fedora 42 gnutls Critical Denial of Service CVE-2026-1584 Advisory

SecurityVulns
Yanac

This backports fixes for a couple CVEs: ** libgnutls: Fix NULL pointer dereference in PSK binder verification A TLS 1.3 resumption attempt with an invalid PSK binder value in ClientHello could lead to a denial of service attack via crashing the server. The updated code guards against the problematic dereference. Reported by Jaehun Lee. [Fixes: GNUTLS-LinuxSecurity – Security AdvisoriesRead More