Summary
[3.7.6-18]
- Update gnutls-3.7.8-fips-pct-dh.patch to the upstream version (#2168610)
[3.7.6-17]
- Fix timing side-channel in TLS RSA key exchange (#2162600)
[3.7.6-16]
- fips: extend PCT to DH key generation (#2168610)
[3.7.6-14]
- fips: remove library path checking from FIPS integrity check (#2149638)
- fips: rename hmac file to its previous name (#2149640)
[3.7.6-13]
- cipher: add restriction on CCM tag length under FIPS mode (#2144535)
- nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2144537)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | gnutls | 0:3.7.6-18.el9_1 |
| Oracle Linux · 9 | gnutls-c++ | 0:3.7.6-18.el9_1 |
| Oracle Linux · 9 | gnutls-dane | 0:3.7.6-18.el9_1 |
| Oracle Linux · 9 | gnutls-devel | 0:3.7.6-18.el9_1 |
| Oracle Linux · 9 | gnutls-utils | 0:3.7.6-18.el9_1 |
Vulnerabilities 1
-
High 7.4
A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can…