Summary
[3.6.8-8]
- Use fallback random function for RSA blinding in FIPS selftests
[3.6.8-7]
- Fix deterministic signature creation in selftests
[3.6.8-6]
- Treat login error more gracefully when enumerating PKCS#11 tokens (#1705478)
- Use deterministic ECDSA/DSA in FIPS selftests (#1716560)
- Add gnutls_aead_cipher_{encrypt,decrypt}v2 functions (#1684461)
[3.6.8-5]
- Avoid UB when encrypting session tickets
[3.6.8-4]
- Add RNG continuous test under FIPS
[3.6.8-3]
- Follow-up fix on multiple key updates handling (#1673975)
[3.6.8-2]
- Run FIPS AES self-tests over overridden algorithms
[3.6.8-1]
- Update to upstream 3.6.8 release
[3.6.5-4]
- Fixed FIPS signatures self tests (#1680509)
[3.6.5-3]
- Fixed CVE-2019-3829 (#1693285)
- Fixed CVE-2019-3836 (#1693288)
- Added explicit BuildRequires for nettle-devel >= 3.4.1
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | gnutls | 0:3.6.8-8.el8 |
| Oracle Linux · 8 | gnutls-c++ | 0:3.6.8-8.el8 |
| Oracle Linux · 8 | gnutls-dane | 0:3.6.8-8.el8 |
| Oracle Linux · 8 | gnutls-devel | 0:3.6.8-8.el8 |
| Oracle Linux · 8 | gnutls-utils | 0:3.6.8-8.el8 |
Vulnerabilities 2
-
Medium 5.9
It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versi…
-
Medium 5.3CVE-2019-3829 EPSS 59%
A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability i…