# CVE-2024-12243: gnutls: This update for gnutls fixes the following issues: - CVE-2024-12243: quadratic complexity of DER input decoding in l... CVE-2024-12243 is fixed in 20 products on 1 platform, first by gnutls-bin 3.6.13-2ubuntu1.12, released February 10, 2025. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2024-12243 - Priority: Routine - CVSS: 5.3 (Medium) - EPSS: 0.0129 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Feb 10, 2025 ## Description This update for gnutls fixes the following issues: - CVE-2024-12243: quadratic complexity of DER input decoding in libtasn1 can lead to a DoS (bsc#1236974). ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | gnutls RHEL 8 | 0:3.6.16-8.el8_10.3 | [RHSA-2025:4051](https://patchblox.com/security/data/fix/linux/rhsa-2025-4051.md) | Apr 23, 2025 | | Linux | gnutls RHEL 9 | 0:3.8.3-6.el9 | [RHSA-2025:7076](https://patchblox.com/security/data/fix/linux/rhsa-2025-7076.md) | May 13, 2025 | | Linux | gnutls almalinux 8 | 3.6.16-8.el8_10.3 | [ALSA-2025:4051](https://patchblox.com/security/data/fix/linux/alsa-2025-4051.md) | Apr 22, 2025 | | Linux | gnutls almalinux 9 | 3.8.3-6.el9 | [ALSA-2025:7076](https://patchblox.com/security/data/fix/linux/alsa-2025-7076.md) | May 13, 2025 | | Linux | gnutls amzn 2023 | 3.8.3-6.amzn2023.0.1 | [ALAS2023-2025-958](https://patchblox.com/security/data/fix/linux/alas2023-2025-958.md) | May 5, 2025 | | Linux | gnutls ol 8 | 0:3.6.16-8.el8_10.3 | [ELSA-2025-4051](https://patchblox.com/security/data/fix/linux/elsa-2025-4051.md) | Apr 21, 2025 | | Linux | gnutls ol 9 | 0:3.8.3-6.el9 | [ELSA-2025-7076](https://patchblox.com/security/data/fix/linux/elsa-2025-7076.md) | May 16, 2025 | | Linux | gnutls opensuse-leap 15.6 | 3.8.3-150600.4.6.2 | [SUSE-SU-2025:0764-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0764-1.md) | Mar 3, 2025 | | Linux | gnutls rocky 8 | 0:3.6.16-8.el8_10.3 | [RLSA-2025:4051](https://patchblox.com/security/data/fix/linux/rlsa-2025-4051.md) | Jul 29, 2025 | | Linux | gnutls rocky 9 | 0:3.8.3-6.el9 | [RLSA-2025:7076](https://patchblox.com/security/data/fix/linux/rlsa-2025-7076.md) | Oct 4, 2025 | | Linux | gnutls sles 15.6 | 3.8.3-150600.4.6.2 | [SUSE-SU-2025:0764-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0764-1.md) | Mar 3, 2025 | | Linux | gnutls sles 15.7 | 3.8.3-150600.4.6.2 | [SUSE-SU-2025:00764-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-00764-1.md) | Jun 6, 2025 | | Linux | gnutls-bin Ubuntu 18.04.6 LTS (bionic) | 3.5.18-1ubuntu1.6+esm3 | [gnutls-bin 3.5.18-1ubuntu1.6+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gnutls-bin-3.5.18-1ubuntu1.6-esm3.md) | May 4, 2026 | | Linux | gnutls-bin Ubuntu 20.04 LTS (focal) | 3.6.13-2ubuntu1.12 | [gnutls-bin 3.6.13-2ubuntu1.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gnutls-bin-3.6.13-2ubuntu1.12.md) | Feb 10, 2025 | | Linux | gnutls-bin Ubuntu 22.04.1 LTS (jammy) | 3.7.3-4ubuntu1.6 | [gnutls-bin 3.7.3-4ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gnutls-bin-3.7.3-4ubuntu1.6.md) | Feb 10, 2025 | | Linux | gnutls-bin Ubuntu 24.04.5 LTS (noble) | 3.8.3-1.1ubuntu3.3 | [gnutls-bin 3.8.3-1.1ubuntu3.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-gnutls-bin-3.8.3-1.1ubuntu3.3.md) | Feb 10, 2025 | | Linux | gnutls-bin Ubuntu 24.10 (oracular) | 3.8.6-2ubuntu1.1 | [gnutls-bin 3.8.6-2ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-gnutls-bin-3.8.6-2ubuntu1.1.md) | Jan 16, 2026 | | Linux | gnutls-bin Ubuntu 25.04 (plucky) | 3.8.9-2ubuntu1 | [gnutls-bin 3.8.9-2ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-gnutls-bin-3.8.9-2ubuntu1.md) | Jan 16, 2026 | | Linux | gnutls-c++ RHEL 8 | 0:3.6.16-8.el8_10.3 | [RHSA-2025:4051](https://patchblox.com/security/data/fix/linux/rhsa-2025-4051.md) | Apr 23, 2025 | | Linux | gnutls-c++ RHEL 9 | 0:3.8.3-6.el9 | [RHSA-2025:7076](https://patchblox.com/security/data/fix/linux/rhsa-2025-7076.md) | May 13, 2025 | | Linux | gnutls-c++ almalinux 8 | 3.6.16-8.el8_10.3 | [ALSA-2025:4051](https://patchblox.com/security/data/fix/linux/alsa-2025-4051.md) | Apr 22, 2025 | | Linux | gnutls-c++ almalinux 9 | 3.8.3-6.el9 | [ALSA-2025:7076](https://patchblox.com/security/data/fix/linux/alsa-2025-7076.md) | May 13, 2025 | | Linux | gnutls-c++ amzn 2023 | 3.8.3-6.amzn2023.0.1 | [ALAS2023-2025-958](https://patchblox.com/security/data/fix/linux/alas2023-2025-958.md) | May 5, 2025 | | Linux | gnutls-c++ ol 8 | 0:3.6.16-8.el8_10.3 | [ELSA-2025-4051](https://patchblox.com/security/data/fix/linux/elsa-2025-4051.md) | Apr 21, 2025 | | Linux | gnutls-c++ ol 9 | 0:3.8.3-6.el9 | [ELSA-2025-7076](https://patchblox.com/security/data/fix/linux/elsa-2025-7076.md) | May 16, 2025 | | Linux | gnutls-c++-debuginfo amzn 2023 | 3.8.3-6.amzn2023.0.1 | [ALAS2023-2025-958](https://patchblox.com/security/data/fix/linux/alas2023-2025-958.md) | May 5, 2025 | | Linux | gnutls-dane RHEL 8 | 0:3.6.16-8.el8_10.3 | [RHSA-2025:4051](https://patchblox.com/security/data/fix/linux/rhsa-2025-4051.md) | Apr 23, 2025 | | Linux | gnutls-dane RHEL 9 | 0:3.8.3-6.el9 | [RHSA-2025:7076](https://patchblox.com/security/data/fix/linux/rhsa-2025-7076.md) | May 13, 2025 | | Linux | gnutls-dane almalinux 8 | 3.6.16-8.el8_10.3 | [ALSA-2025:4051](https://patchblox.com/security/data/fix/linux/alsa-2025-4051.md) | Apr 22, 2025 | | Linux | gnutls-dane almalinux 9 | 3.8.3-6.el9 | [ALSA-2025:7076](https://patchblox.com/security/data/fix/linux/alsa-2025-7076.md) | May 13, 2025 | | Linux | gnutls-dane amzn 2023 | 3.8.3-6.amzn2023.0.1 | [ALAS2023-2025-958](https://patchblox.com/security/data/fix/linux/alas2023-2025-958.md) | May 5, 2025 | | Linux | gnutls-dane ol 8 | 0:3.6.16-8.el8_10.3 | [ELSA-2025-4051](https://patchblox.com/security/data/fix/linux/elsa-2025-4051.md) | Apr 21, 2025 | | Linux | gnutls-dane ol 9 | 0:3.8.3-6.el9 | [ELSA-2025-7076](https://patchblox.com/security/data/fix/linux/elsa-2025-7076.md) | May 16, 2025 | | Linux | gnutls-dane-debuginfo amzn 2023 | 3.8.3-6.amzn2023.0.1 | [ALAS2023-2025-958](https://patchblox.com/security/data/fix/linux/alas2023-2025-958.md) | May 5, 2025 | | Linux | gnutls-debuginfo amzn 2023 | 3.8.3-6.amzn2023.0.1 | [ALAS2023-2025-958](https://patchblox.com/security/data/fix/linux/alas2023-2025-958.md) | May 5, 2025 | | Linux | gnutls-debugsource amzn 2023 | 3.8.3-6.amzn2023.0.1 | [ALAS2023-2025-958](https://patchblox.com/security/data/fix/linux/alas2023-2025-958.md) | May 5, 2025 | | Linux | gnutls-devel RHEL 8 | 0:3.6.16-8.el8_10.3 | [RHSA-2025:4051](https://patchblox.com/security/data/fix/linux/rhsa-2025-4051.md) | Apr 23, 2025 | | Linux | gnutls-devel RHEL 9 | 0:3.8.3-6.el9 | [RHSA-2025:7076](https://patchblox.com/security/data/fix/linux/rhsa-2025-7076.md) | May 13, 2025 | | Linux | gnutls-devel almalinux 8 | 3.6.16-8.el8_10.3 | [ALSA-2025:4051](https://patchblox.com/security/data/fix/linux/alsa-2025-4051.md) | Apr 22, 2025 | | Linux | gnutls-devel almalinux 9 | 3.8.3-6.el9 | [ALSA-2025:7076](https://patchblox.com/security/data/fix/linux/alsa-2025-7076.md) | May 13, 2025 | | Linux | gnutls-devel amzn 2023 | 3.8.3-6.amzn2023.0.1 | [ALAS2023-2025-958](https://patchblox.com/security/data/fix/linux/alas2023-2025-958.md) | May 5, 2025 | | Linux | gnutls-devel ol 8 | 0:3.6.16-8.el8_10.3 | [ELSA-2025-4051](https://patchblox.com/security/data/fix/linux/elsa-2025-4051.md) | Apr 21, 2025 | | Linux | gnutls-devel ol 9 | 0:3.8.3-6.el9 | [ELSA-2025-7076](https://patchblox.com/security/data/fix/linux/elsa-2025-7076.md) | May 16, 2025 | | Linux | gnutls-utils RHEL 8 | 0:3.6.16-8.el8_10.3 | [RHSA-2025:4051](https://patchblox.com/security/data/fix/linux/rhsa-2025-4051.md) | Apr 23, 2025 | | Linux | gnutls-utils RHEL 9 | 0:3.8.3-6.el9 | [RHSA-2025:7076](https://patchblox.com/security/data/fix/linux/rhsa-2025-7076.md) | May 13, 2025 | | Linux | gnutls-utils almalinux 8 | 3.6.16-8.el8_10.3 | [ALSA-2025:4051](https://patchblox.com/security/data/fix/linux/alsa-2025-4051.md) | Apr 22, 2025 | | Linux | gnutls-utils almalinux 9 | 3.8.3-6.el9 | [ALSA-2025:7076](https://patchblox.com/security/data/fix/linux/alsa-2025-7076.md) | May 13, 2025 | | Linux | gnutls-utils amzn 2023 | 3.8.3-6.amzn2023.0.1 | [ALAS2023-2025-958](https://patchblox.com/security/data/fix/linux/alas2023-2025-958.md) | May 5, 2025 | | Linux | gnutls-utils ol 8 | 0:3.6.16-8.el8_10.3 | [ELSA-2025-4051](https://patchblox.com/security/data/fix/linux/elsa-2025-4051.md) | Apr 21, 2025 | | Linux | gnutls-utils ol 9 | 0:3.8.3-6.el9 | [ELSA-2025-7076](https://patchblox.com/security/data/fix/linux/elsa-2025-7076.md) | May 16, 2025 | | Linux | gnutls-utils-debuginfo amzn 2023 | 3.8.3-6.amzn2023.0.1 | [ALAS2023-2025-958](https://patchblox.com/security/data/fix/linux/alas2023-2025-958.md) | May 5, 2025 | | Linux | gnutls28 Debian 11.6 (bullseye) | 3.7.1-5+deb11u7 | [DLA-4063-1](https://patchblox.com/security/data/fix/linux/dla-4063-1.md) | Feb 21, 2025 | | Linux | gnutls28 Debian 12.15 (bookworm) | 3.7.9-2+deb12u4 | [DSA-5867-1](https://patchblox.com/security/data/fix/linux/dsa-5867-1.md) | Feb 17, 2025 | | Linux | gnutls28 Debian 13.5 (trixie) | 3.8.9-2 | [DEBIAN-CVE-2024-12243](https://patchblox.com/security/data/fix/linux/debian-cve-2024-12243.md) | Feb 10, 2025 | | Linux | gnutls28 Debian 14 | 3.8.9-2 | [DEBIAN-CVE-2024-12243](https://patchblox.com/security/data/fix/linux/debian-cve-2024-12243.md) | Feb 10, 2025 | | Linux | guile-gnutls Ubuntu 20.04 LTS (focal) | 3.6.13-2ubuntu1.12 | [guile-gnutls 3.6.13-2ubuntu1.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-guile-gnutls-3.6.13-2ubuntu1.12.md) | Feb 10, 2025 | | Linux | guile-gnutls Ubuntu 22.04.1 LTS (jammy) | 3.7.3-4ubuntu1.6 | [guile-gnutls 3.7.3-4ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-guile-gnutls-3.7.3-4ubuntu1.6.md) | Feb 10, 2025 | | Linux | libgnutls-dane0 Ubuntu 18.04.6 LTS (bionic) | 3.5.18-1ubuntu1.6+esm3 | [libgnutls-dane0 3.5.18-1ubuntu1.6+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libgnutls-dane0-3.5.18-1ubuntu1.6-esm3.md) | May 4, 2026 | | Linux | libgnutls-dane0 Ubuntu 20.04 LTS (focal) | 3.6.13-2ubuntu1.12 | [libgnutls-dane0 3.6.13-2ubuntu1.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libgnutls-dane0-3.6.13-2ubuntu1.12.md) | Feb 10, 2025 | | Linux | libgnutls-dane0 Ubuntu 22.04.1 LTS (jammy) | 3.7.3-4ubuntu1.6 | [libgnutls-dane0 3.7.3-4ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libgnutls-dane0-3.7.3-4ubuntu1.6.md) | Feb 10, 2025 | | Linux | libgnutls-dane0t64 Ubuntu 24.04.5 LTS (noble) | 3.8.3-1.1ubuntu3.3 | [libgnutls-dane0t64 3.8.3-1.1ubuntu3.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libgnutls-dane0t64-3.8.3-1.1ubuntu3.3.md) | Feb 10, 2025 | | Linux | libgnutls-dane0t64 Ubuntu 24.10 (oracular) | 3.8.6-2ubuntu1.1 | [libgnutls-dane0t64 3.8.6-2ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libgnutls-dane0t64-3.8.6-2ubuntu1.1.md) | Jan 16, 2026 | | Linux | libgnutls-dane0t64 Ubuntu 25.04 (plucky) | 3.8.9-2ubuntu1 | [libgnutls-dane0t64 3.8.9-2ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libgnutls-dane0t64-3.8.9-2ubuntu1.md) | Jan 16, 2026 | | Linux | libgnutls-openssl27 Ubuntu 18.04.6 LTS (bionic) | 3.5.18-1ubuntu1.6+esm3 | [libgnutls-openssl27 3.5.18-1ubuntu1.6+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libgnutls-openssl27-3.5.18-1ubuntu1.6-esm3.md) | May 4, 2026 | | Linux | libgnutls-openssl27 Ubuntu 20.04 LTS (focal) | 3.6.13-2ubuntu1.12 | [libgnutls-openssl27 3.6.13-2ubuntu1.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libgnutls-openssl27-3.6.13-2ubuntu1.12.md) | Feb 10, 2025 | | Linux | libgnutls-openssl27 Ubuntu 22.04.1 LTS (jammy) | 3.7.3-4ubuntu1.6 | [libgnutls-openssl27 3.7.3-4ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libgnutls-openssl27-3.7.3-4ubuntu1.6.md) | Feb 10, 2025 | | Linux | libgnutls-openssl27t64 Ubuntu 24.04.5 LTS (noble) | 3.8.3-1.1ubuntu3.3 | [libgnutls-openssl27t64 3.8.3-1.1ubuntu3.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libgnutls-openssl27t64-3.8.3-1.1ubuntu3.3.md) | Feb 10, 2025 | | Linux | libgnutls-openssl27t64 Ubuntu 24.10 (oracular) | 3.8.6-2ubuntu1.1 | [libgnutls-openssl27t64 3.8.6-2ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libgnutls-openssl27t64-3.8.6-2ubuntu1.1.md) | Jan 16, 2026 | | Linux | libgnutls-openssl27t64 Ubuntu 25.04 (plucky) | 3.8.9-2ubuntu1 | [libgnutls-openssl27t64 3.8.9-2ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libgnutls-openssl27t64-3.8.9-2ubuntu1.md) | Jan 16, 2026 | | Linux | libgnutls30 Ubuntu 18.04.6 LTS (bionic) | 3.5.18-1ubuntu1.6+esm3 | [libgnutls30 3.5.18-1ubuntu1.6+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libgnutls30-3.5.18-1ubuntu1.6-esm3.md) | May 4, 2026 | | Linux | libgnutls30 Ubuntu 20.04 LTS (focal) | 3.6.13-2ubuntu1.12 | [libgnutls30 3.6.13-2ubuntu1.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libgnutls30-3.6.13-2ubuntu1.12.md) | Feb 10, 2025 | | Linux | libgnutls30 Ubuntu 22.04.1 LTS (jammy) | 3.7.3-4ubuntu1.6 | [libgnutls30 3.7.3-4ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libgnutls30-3.7.3-4ubuntu1.6.md) | Feb 10, 2025 | | Linux | libgnutls30t64 Ubuntu 24.04.5 LTS (noble) | 3.8.3-1.1ubuntu3.3 | [libgnutls30t64 3.8.3-1.1ubuntu3.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libgnutls30t64-3.8.3-1.1ubuntu3.3.md) | Feb 10, 2025 | | Linux | libgnutls30t64 Ubuntu 24.10 (oracular) | 3.8.6-2ubuntu1.1 | [libgnutls30t64 3.8.6-2ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libgnutls30t64-3.8.6-2ubuntu1.1.md) | Jan 16, 2026 | | Linux | libgnutls30t64 Ubuntu 25.04 (plucky) | 3.8.9-2ubuntu1 | [libgnutls30t64 3.8.9-2ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libgnutls30t64-3.8.9-2ubuntu1.md) | Jan 16, 2026 | | Linux | libgnutlsxx28 Ubuntu 18.04.6 LTS (bionic) | 3.5.18-1ubuntu1.6+esm3 | [libgnutlsxx28 3.5.18-1ubuntu1.6+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libgnutlsxx28-3.5.18-1ubuntu1.6-esm3.md) | May 4, 2026 | | Linux | libgnutlsxx28 Ubuntu 20.04 LTS (focal) | 3.6.13-2ubuntu1.12 | [libgnutlsxx28 3.6.13-2ubuntu1.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libgnutlsxx28-3.6.13-2ubuntu1.12.md) | Feb 10, 2025 | | Linux | libgnutlsxx28 Ubuntu 22.04.1 LTS (jammy) | 3.7.3-4ubuntu1.6 | [libgnutlsxx28 3.7.3-4ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libgnutlsxx28-3.7.3-4ubuntu1.6.md) | Feb 10, 2025 | --- Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.