Summary
[3.6.14-7]
- Increase DH key bits to >= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when 'no_renegotiation' alert is received (#1873959)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | gnutls | 0:3.6.14-7.el8_3 |
| Oracle Linux · 8 | gnutls-c++ | 0:3.6.14-7.el8_3 |
| Oracle Linux · 8 | gnutls-dane | 0:3.6.14-7.el8_3 |
| Oracle Linux · 8 | gnutls-devel | 0:3.6.14-7.el8_3 |
| Oracle Linux · 8 | gnutls-utils | 0:3.6.14-7.el8_3 |
Vulnerabilities 1
-
Unscored —
An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if…