gnutls security update

2024-04-1900:00:00

linux.oracle.com

gnutls

security update

fips package

vulnerabilities

loop detection

side-channel attacks

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

Confidence

Low

EPSS

0.002

Percentile

62.0%

JSON

[3.7.6-23.4_fips]

Add FIPS package change: add fips suffix to Release and
set Epoch to 10 [Orabug: 35925409]
Update FIPS module name for Oracle Linux [Orabug: 35925409]
Verify salt length and iteration count for PBKDF [Orabug: 35925409]
[3.7.6-23.4]
Fix timing side-channel in deterministic ECDSA (RHEL-28958)
Fix potential crash during chain building/verification (RHEL-28953)
[3.7.6-23.3]
x509: detect loop in certificate chain (RHEL-21759)
fips: Zeroize temporary values in integrity check (RHEL-21870)
[3.7.6-23.2]
auth/rsa_psk: minimize branching after decryption
[3.7.6-23.1]
auth/rsa_psk: side-step potential side-channel (RHEL-16755)
[3.7.6-23]
Mark SHA-1 signature verification non-approved in FIPS (#2102751)
[3.7.6-22]
Skip KTLS test on old kernel if host and target arches are different

OSVersionArchitecturePackageVersionFilename
oracle linux9srcgnutls< 3.7.6-23.el9_3.4_fipsgnutls-3.7.6-23.el9_3.4_fips.src.rpm
oracle linux9aarch64gnutls< 3.7.6-23.el9_3.4_fipsgnutls-3.7.6-23.el9_3.4_fips.aarch64.rpm
oracle linux9aarch64gnutls-c++< 3.7.6-23.el9_3.4_fipsgnutls-c++-3.7.6-23.el9_3.4_fips.aarch64.rpm
oracle linux9aarch64gnutls-dane< 3.7.6-23.el9_3.4_fipsgnutls-dane-3.7.6-23.el9_3.4_fips.aarch64.rpm
oracle linux9aarch64gnutls-devel< 3.7.6-23.el9_3.4_fipsgnutls-devel-3.7.6-23.el9_3.4_fips.aarch64.rpm
oracle linux9aarch64gnutls-utils< 3.7.6-23.el9_3.4_fipsgnutls-utils-3.7.6-23.el9_3.4_fips.aarch64.rpm
oracle linux9srcgnutls< 3.7.6-23.el9_3.4_fipsgnutls-3.7.6-23.el9_3.4_fips.src.rpm
oracle linux9i686gnutls< 3.7.6-23.el9_3.4_fipsgnutls-3.7.6-23.el9_3.4_fips.i686.rpm
oracle linux9x86_64gnutls< 3.7.6-23.el9_3.4_fipsgnutls-3.7.6-23.el9_3.4_fips.x86_64.rpm
oracle linux9i686gnutls-c++< 3.7.6-23.el9_3.4_fipsgnutls-c++-3.7.6-23.el9_3.4_fips.i686.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	9	src	gnutls	< 3.7.6-23.el9_3.4_fips	gnutls-3.7.6-23.el9_3.4_fips.src.rpm
oracle linux	9	aarch64	gnutls	< 3.7.6-23.el9_3.4_fips	gnutls-3.7.6-23.el9_3.4_fips.aarch64.rpm
oracle linux	9	aarch64	gnutls-c++	< 3.7.6-23.el9_3.4_fips	gnutls-c++-3.7.6-23.el9_3.4_fips.aarch64.rpm
oracle linux	9	aarch64	gnutls-dane	< 3.7.6-23.el9_3.4_fips	gnutls-dane-3.7.6-23.el9_3.4_fips.aarch64.rpm
oracle linux	9	aarch64	gnutls-devel	< 3.7.6-23.el9_3.4_fips	gnutls-devel-3.7.6-23.el9_3.4_fips.aarch64.rpm
oracle linux	9	aarch64	gnutls-utils	< 3.7.6-23.el9_3.4_fips	gnutls-utils-3.7.6-23.el9_3.4_fips.aarch64.rpm
oracle linux	9	src	gnutls	< 3.7.6-23.el9_3.4_fips	gnutls-3.7.6-23.el9_3.4_fips.src.rpm
oracle linux	9	i686	gnutls	< 3.7.6-23.el9_3.4_fips	gnutls-3.7.6-23.el9_3.4_fips.i686.rpm
oracle linux	9	x86_64	gnutls	< 3.7.6-23.el9_3.4_fips	gnutls-3.7.6-23.el9_3.4_fips.x86_64.rpm
oracle linux	9	i686	gnutls-c++	< 3.7.6-23.el9_3.4_fips	gnutls-c++-3.7.6-23.el9_3.4_fips.i686.rpm