Summary
[3.3.8-14]
- Prevent downgrade attack to RSA-MD5 in server key exchange.
[3.3.8-13]
- Corrected reseed and respect of max_number_of_bits_per_request in
FIPS140-2 mode. Also enhanced the initial tests. (#1228199)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | gnutls | 0:3.3.8-14.el7_2 |
| Oracle Linux · 7 | gnutls-c++ | 0:3.3.8-14.el7_2 |
| Oracle Linux · 7 | gnutls-dane | 0:3.3.8-14.el7_2 |
| Oracle Linux · 7 | gnutls-devel | 0:3.3.8-14.el7_2 |
| Oracle Linux · 7 | gnutls-guile | 0:2.8.5-19.el6_7 |
| Oracle Linux · 7 | gnutls-utils | 0:3.3.8-14.el7_2 |
Vulnerabilities 1
-
Unscored —
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x be…