Fixed packages 21
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | gnutls-c++ | 0:3.6.16-4.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | gnutls-c++-debuginfo | 0:3.6.16-4.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | gnutls-dane | 0:3.6.16-4.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | gnutls-dane-debuginfo | 0:3.6.16-4.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | gnutls-debuginfo | 0:3.6.16-4.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | gnutls-debugsource | 0:3.6.16-4.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | gnutls-devel | 0:3.6.16-4.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | gnutls-utils | 0:3.6.16-4.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | gnutls-utils-debuginfo | 0:3.6.16-4.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nettle-debuginfo | 0:3.4.1-7.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nettle-debugsource | 0:3.4.1-7.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nettle-devel | 0:3.4.1-7.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | gnutls | 0:3.6.16-4.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | gnutls-c++-debuginfo | 0:3.6.16-4.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | gnutls-dane-debuginfo | 0:3.6.16-4.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | gnutls-debuginfo | 0:3.6.16-4.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | gnutls-debugsource | 0:3.6.16-4.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | gnutls-utils-debuginfo | 0:3.6.16-4.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | nettle | 0:3.4.1-7.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | nettle-debuginfo | 0:3.4.1-7.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | nettle-debugsource | 0:3.4.1-7.el8 |
Vulnerabilities 3
-
Critical 9.8
A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory…
-
Unscored —
A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption …
-
Unscored —
A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could u…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1776250
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1908110
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1908334
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1922275
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1922276
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1965445
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1967983
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4451.json
-
report
https://access.redhat.com/security/cve/CVE-2021-3580
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-3580
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-3580
-
report
https://access.redhat.com/security/cve/CVE-2021-20231
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-20231
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-20231
-
article
https://gitlab.com/gnutls/gnutls/-/issues/1151
-
article
https://www.gnutls.org/security-new.html#GNUTLS-SA-2021-03-10
-
report
https://access.redhat.com/security/cve/CVE-2021-20232
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-20232
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-20232