(RHSA-2024:2889) Moderate: gnutls security update

2024-05-1611:35:49

access.redhat.com

gnutls

security update

moderate

chain building

verification

minerva

side-channel

information leak

5.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.2%

JSON

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

gnutls: potential crash during chain building/verification (CVE-2024-28835)
gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9x86_64gnutls-debugsource< 3.7.6-21.el9_2.3gnutls-debugsource-3.7.6-21.el9_2.3.x86_64.rpm
RedHat9x86_64gnutls-dane< 3.7.6-21.el9_2.3gnutls-dane-3.7.6-21.el9_2.3.x86_64.rpm
RedHat9s390xgnutls-utils< 3.7.6-21.el9_2.3gnutls-utils-3.7.6-21.el9_2.3.s390x.rpm
RedHat9i686gnutls-devel< 3.7.6-21.el9_2.3gnutls-devel-3.7.6-21.el9_2.3.i686.rpm
RedHat9x86_64gnutls< 3.7.6-21.el9_2.3gnutls-3.7.6-21.el9_2.3.x86_64.rpm
RedHat9i686gnutls-debugsource< 3.7.6-21.el9_2.3gnutls-debugsource-3.7.6-21.el9_2.3.i686.rpm
RedHat9ppc64legnutls-utils-debuginfo< 3.7.6-21.el9_2.3gnutls-utils-debuginfo-3.7.6-21.el9_2.3.ppc64le.rpm
RedHat9aarch64gnutls-debuginfo< 3.7.6-21.el9_2.3gnutls-debuginfo-3.7.6-21.el9_2.3.aarch64.rpm
RedHat9s390xgnutls-dane< 3.7.6-21.el9_2.3gnutls-dane-3.7.6-21.el9_2.3.s390x.rpm
RedHat9x86_64gnutls-devel< 3.7.6-21.el9_2.3gnutls-devel-3.7.6-21.el9_2.3.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	x86_64	gnutls-debugsource	< 3.7.6-21.el9_2.3	gnutls-debugsource-3.7.6-21.el9_2.3.x86_64.rpm
RedHat	9	x86_64	gnutls-dane	< 3.7.6-21.el9_2.3	gnutls-dane-3.7.6-21.el9_2.3.x86_64.rpm
RedHat	9	s390x	gnutls-utils	< 3.7.6-21.el9_2.3	gnutls-utils-3.7.6-21.el9_2.3.s390x.rpm
RedHat	9	i686	gnutls-devel	< 3.7.6-21.el9_2.3	gnutls-devel-3.7.6-21.el9_2.3.i686.rpm
RedHat	9	x86_64	gnutls	< 3.7.6-21.el9_2.3	gnutls-3.7.6-21.el9_2.3.x86_64.rpm
RedHat	9	i686	gnutls-debugsource	< 3.7.6-21.el9_2.3	gnutls-debugsource-3.7.6-21.el9_2.3.i686.rpm
RedHat	9	ppc64le	gnutls-utils-debuginfo	< 3.7.6-21.el9_2.3	gnutls-utils-debuginfo-3.7.6-21.el9_2.3.ppc64le.rpm
RedHat	9	aarch64	gnutls-debuginfo	< 3.7.6-21.el9_2.3	gnutls-debuginfo-3.7.6-21.el9_2.3.aarch64.rpm
RedHat	9	s390x	gnutls-dane	< 3.7.6-21.el9_2.3	gnutls-dane-3.7.6-21.el9_2.3.s390x.rpm
RedHat	9	x86_64	gnutls-devel	< 3.7.6-21.el9_2.3	gnutls-devel-3.7.6-21.el9_2.3.x86_64.rpm