https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-11T13:41:18.581957+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-28835 CVE-2024-28835 — Gnutls: potential crash during chain building/verification 2026-10-11T13:41:18.632417+00:00

Affected: gnutls, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command.

 https://vulnerability.circl.lu/vuln/usn-6733-1 USN-6733-1 — gnutls28 vulnerabilities 2026-10-11T13:41:18.632574+00:00

Affected: Ubuntu:20.04:LTS: gnutls28, Ubuntu:22.04:LTS: gnutls28

It was discovered that GnuTLS had a timing side-channel when performing certain ECDSA operations. A remote attacker could possibly use this issue to recover sensitive information. (CVE-2024-28834)

It was discovered that GnuTLS incorrectly handled verifying certain PEM bundles. A remote attacker could possibly use this issue to cause GnuTLS to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 23.10. (CVE-2024-28835)