Skip to content
OpenAdvisories
Medium ELSA-2023-1141 1 CVE

Moderate: gnutls security and bug fix update (Oracle Linux 9)

Published Mar 8, 2023 · Updated Mar 8, 2023

Summary

[3.7.6-18]
- Update gnutls-3.7.8-fips-pct-dh.patch to the upstream version (#2168610)

[3.7.6-17]
- Fix timing side-channel in TLS RSA key exchange (#2162600)

[3.7.6-16]
- fips: extend PCT to DH key generation (#2168610)

[3.7.6-14]
- fips: remove library path checking from FIPS integrity check (#2149638)
- fips: rename hmac file to its previous name (#2149640)

[3.7.6-13]
- cipher: add restriction on CCM tag length under FIPS mode (#2144535)
- nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2144537)

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 9 gnutls 0:3.7.6-18.el9_1
Oracle Linux · 9 gnutls-c++ 0:3.7.6-18.el9_1
Oracle Linux · 9 gnutls-dane 0:3.7.6-18.el9_1
Oracle Linux · 9 gnutls-devel 0:3.7.6-18.el9_1
Oracle Linux · 9 gnutls-utils 0:3.7.6-18.el9_1

Vulnerabilities 1