gnutls security update

2024-02-0500:00:00

linux.oracle.com

gnutls

security update

rsa keygen

modulus sizes

fips 186-4

orabug 33200526

epoch change

unix

decryption

rhel-21550

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

Low

EPSS

0.002

Percentile

62.0%

JSON

[3.6.16-8.1_fips]

Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
Allow bigger known RSA modulus sizes when calling
rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
Change Epoch from 1 to 10
[3.6.16-8.1]
auth/rsa-psk: minimize branching after decryption (RHEL-21550)

OSVersionArchitecturePackageVersionFilename
oracle linux8srcgnutls< 3.6.16-8.el8_9.1_fipsgnutls-3.6.16-8.el8_9.1_fips.src.rpm
oracle linux8aarch64gnutls< 3.6.16-8.el8_9.1_fipsgnutls-3.6.16-8.el8_9.1_fips.aarch64.rpm
oracle linux8aarch64gnutls-c++< 3.6.16-8.el8_9.1_fipsgnutls-c++-3.6.16-8.el8_9.1_fips.aarch64.rpm
oracle linux8aarch64gnutls-dane< 3.6.16-8.el8_9.1_fipsgnutls-dane-3.6.16-8.el8_9.1_fips.aarch64.rpm
oracle linux8aarch64gnutls-devel< 3.6.16-8.el8_9.1_fipsgnutls-devel-3.6.16-8.el8_9.1_fips.aarch64.rpm
oracle linux8aarch64gnutls-utils< 3.6.16-8.el8_9.1_fipsgnutls-utils-3.6.16-8.el8_9.1_fips.aarch64.rpm
oracle linux8srcgnutls< 3.6.16-8.el8_9.1_fipsgnutls-3.6.16-8.el8_9.1_fips.src.rpm
oracle linux8i686gnutls< 3.6.16-8.el8_9.1_fipsgnutls-3.6.16-8.el8_9.1_fips.i686.rpm
oracle linux8x86_64gnutls< 3.6.16-8.el8_9.1_fipsgnutls-3.6.16-8.el8_9.1_fips.x86_64.rpm
oracle linux8i686gnutls-c++< 3.6.16-8.el8_9.1_fipsgnutls-c++-3.6.16-8.el8_9.1_fips.i686.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	gnutls	< 3.6.16-8.el8_9.1_fips	gnutls-3.6.16-8.el8_9.1_fips.src.rpm
oracle linux	8	aarch64	gnutls	< 3.6.16-8.el8_9.1_fips	gnutls-3.6.16-8.el8_9.1_fips.aarch64.rpm
oracle linux	8	aarch64	gnutls-c++	< 3.6.16-8.el8_9.1_fips	gnutls-c++-3.6.16-8.el8_9.1_fips.aarch64.rpm
oracle linux	8	aarch64	gnutls-dane	< 3.6.16-8.el8_9.1_fips	gnutls-dane-3.6.16-8.el8_9.1_fips.aarch64.rpm
oracle linux	8	aarch64	gnutls-devel	< 3.6.16-8.el8_9.1_fips	gnutls-devel-3.6.16-8.el8_9.1_fips.aarch64.rpm
oracle linux	8	aarch64	gnutls-utils	< 3.6.16-8.el8_9.1_fips	gnutls-utils-3.6.16-8.el8_9.1_fips.aarch64.rpm
oracle linux	8	src	gnutls	< 3.6.16-8.el8_9.1_fips	gnutls-3.6.16-8.el8_9.1_fips.src.rpm
oracle linux	8	i686	gnutls	< 3.6.16-8.el8_9.1_fips	gnutls-3.6.16-8.el8_9.1_fips.i686.rpm
oracle linux	8	x86_64	gnutls	< 3.6.16-8.el8_9.1_fips	gnutls-3.6.16-8.el8_9.1_fips.x86_64.rpm
oracle linux	8	i686	gnutls-c++	< 3.6.16-8.el8_9.1_fips	gnutls-c++-3.6.16-8.el8_9.1_fips.i686.rpm