Skip to content
OpenAdvisories
Medium ELSA-2019-3600 2 CVEs

Moderate: gnutls security, bug fix, and enhancement update (Oracle Linux 8)

Published Nov 14, 2019 · Updated Nov 14, 2019

Summary

[3.6.8-8]
- Use fallback random function for RSA blinding in FIPS selftests

[3.6.8-7]
- Fix deterministic signature creation in selftests

[3.6.8-6]
- Treat login error more gracefully when enumerating PKCS#11 tokens (#1705478)
- Use deterministic ECDSA/DSA in FIPS selftests (#1716560)
- Add gnutls_aead_cipher_{encrypt,decrypt}v2 functions (#1684461)

[3.6.8-5]
- Avoid UB when encrypting session tickets

[3.6.8-4]
- Add RNG continuous test under FIPS

[3.6.8-3]
- Follow-up fix on multiple key updates handling (#1673975)

[3.6.8-2]
- Run FIPS AES self-tests over overridden algorithms

[3.6.8-1]
- Update to upstream 3.6.8 release

[3.6.5-4]
- Fixed FIPS signatures self tests (#1680509)

[3.6.5-3]
- Fixed CVE-2019-3829 (#1693285)
- Fixed CVE-2019-3836 (#1693288)
- Added explicit BuildRequires for nettle-devel >= 3.4.1

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 8 gnutls 0:3.6.8-8.el8
Oracle Linux · 8 gnutls-c++ 0:3.6.8-8.el8
Oracle Linux · 8 gnutls-dane 0:3.6.8-8.el8
Oracle Linux · 8 gnutls-devel 0:3.6.8-8.el8
Oracle Linux · 8 gnutls-utils 0:3.6.8-8.el8

Vulnerabilities 2