Summary
gnutls
[3.6.14-8]
- Port fixes for potential miscalculation in ecdsa_verify (#1942929)
nettle
[3.4.1-4]
- Fix patch application
[3.4.1-3]
- Port fixes for potential miscalculation in ecdsa_verify (#1942924)
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | gnutls | 0:3.6.14-8.el8_3 |
| Oracle Linux · 8 | gnutls-c++ | 0:3.6.14-8.el8_3 |
| Oracle Linux · 8 | gnutls-dane | 0:3.6.14-8.el8_3 |
| Oracle Linux · 8 | gnutls-devel | 0:3.6.14-8.el8_3 |
| Oracle Linux · 8 | gnutls-utils | 0:3.6.14-8.el8_3 |
| Oracle Linux · 8 | nettle | 0:3.4.1-4.el8_3 |
| Oracle Linux · 8 | nettle-devel | 0:3.4.1-4.el8_3 |
Vulnerabilities 1
-
Unscored —
A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, E…