Summary
The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.
Security Fix(es):
* gnutls: timing side-channel in the TLS RSA key exchange code (CVE-2023-0361)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* trap invalid opcode ip:7feef81809fe sp:7fee997419c0 error:0 in libgnutls.so.30.28.2[7feef8040000+1dd000] (BZ#2131152)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | gnutls | 3.6.16-6.el8_7 |
| AlmaLinux · 8 | gnutls-c++ | 3.6.16-6.el8_7 |
| AlmaLinux · 8 | gnutls-dane | 3.6.16-6.el8_7 |
| AlmaLinux · 8 | gnutls-devel | 3.6.16-6.el8_7 |
| AlmaLinux · 8 | gnutls-utils | 3.6.16-6.el8_7 |
Vulnerabilities 1
-
High 7.4
A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can…