gnutls security update

2024-05-0700:00:00

linux.oracle.com

gnutls

security update

timing side-channel

deterministic ecdsa

potential crash

chain building

verification

rhel-28959

rhel-28954

unix

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.2%

JSON

[3.8.3-4]

Bump release to ensure el9 package is greater than el9_* packages
[3.8.3-3]
Bump release to ensure el9 package is greater than el9_* packages
[3.8.3-2]
Fix timing side-channel in deterministic ECDSA (RHEL-28959)
Fix potential crash during chain building/verification (RHEL-28954)

OSVersionArchitecturePackageVersionFilename
oracle linux9srcgnutls< 3.8.3-4.el9_4gnutls-3.8.3-4.el9_4.src.rpm
oracle linux9srcgnutls< 3.8.3-4.el9_4gnutls-3.8.3-4.el9_4.src.rpm
oracle linux9srcgnutls< 3.8.3-4.el9_4gnutls-3.8.3-4.el9_4.src.rpm
oracle linux9aarch64gnutls< 3.8.3-4.el9_4gnutls-3.8.3-4.el9_4.aarch64.rpm
oracle linux9aarch64gnutls< 3.8.3-4.el9_4gnutls-3.8.3-4.el9_4.aarch64.rpm
oracle linux9aarch64gnutls-c++< 3.8.3-4.el9_4gnutls-c++-3.8.3-4.el9_4.aarch64.rpm
oracle linux9aarch64gnutls-dane< 3.8.3-4.el9_4gnutls-dane-3.8.3-4.el9_4.aarch64.rpm
oracle linux9aarch64gnutls-devel< 3.8.3-4.el9_4gnutls-devel-3.8.3-4.el9_4.aarch64.rpm
oracle linux9aarch64gnutls-utils< 3.8.3-4.el9_4gnutls-utils-3.8.3-4.el9_4.aarch64.rpm
oracle linux9srcgnutls< 3.8.3-4.el9_4gnutls-3.8.3-4.el9_4.src.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	9	src	gnutls	< 3.8.3-4.el9_4	gnutls-3.8.3-4.el9_4.src.rpm
oracle linux	9	src	gnutls	< 3.8.3-4.el9_4	gnutls-3.8.3-4.el9_4.src.rpm
oracle linux	9	src	gnutls	< 3.8.3-4.el9_4	gnutls-3.8.3-4.el9_4.src.rpm
oracle linux	9	aarch64	gnutls	< 3.8.3-4.el9_4	gnutls-3.8.3-4.el9_4.aarch64.rpm
oracle linux	9	aarch64	gnutls	< 3.8.3-4.el9_4	gnutls-3.8.3-4.el9_4.aarch64.rpm
oracle linux	9	aarch64	gnutls-c++	< 3.8.3-4.el9_4	gnutls-c++-3.8.3-4.el9_4.aarch64.rpm
oracle linux	9	aarch64	gnutls-dane	< 3.8.3-4.el9_4	gnutls-dane-3.8.3-4.el9_4.aarch64.rpm
oracle linux	9	aarch64	gnutls-devel	< 3.8.3-4.el9_4	gnutls-devel-3.8.3-4.el9_4.aarch64.rpm
oracle linux	9	aarch64	gnutls-utils	< 3.8.3-4.el9_4	gnutls-utils-3.8.3-4.el9_4.aarch64.rpm
oracle linux	9	src	gnutls	< 3.8.3-4.el9_4	gnutls-3.8.3-4.el9_4.src.rpm