Medium ELSA-2023-1569 1 CVE

Moderate: gnutls security and bug fix update (Oracle Linux 8)

Published Apr 4, 2023 · Updated Apr 4, 2023

Ecosystem: Oracle Linux

Summary

[3.6.16-6]
- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 8	gnutls	0:3.6.16-6.el8_7
Oracle Linux · 8	gnutls-c++	0:3.6.16-6.el8_7
Oracle Linux · 8	gnutls-dane	0:3.6.16-6.el8_7
Oracle Linux · 8	gnutls-devel	0:3.6.16-6.el8_7
Oracle Linux · 8	gnutls-utils	0:3.6.16-6.el8_7

Vulnerabilities 1

High 7.4

CVE-2023-0361

A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can…

gnutls28 gnutls28 gnutls gnutls Debian Ubuntu Azure Linux Alpine

Feb 15, 2023