Skip to content
OpenAdvisories
High RLSA-2021:1206 1 CVE

Important: gnutls and nettle security update

Published Apr 14, 2021 · Updated Feb 5, 2026

Summary

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Nettle is a cryptographic library that is designed to fit easily in almost any context: In crypto toolkits for object-oriented languages, such as C++, Python, or Pike, in applications like LSH or GNUPG, or even in kernel space.

Security Fix(es):

* nettle: Out of bounds memory access in signature verification (CVE-2021-20305)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 2

ReleasePackageFixed in
Rocky Linux · 8 gnutls 0:3.6.14-8.el8_3
Rocky Linux · 8 nettle 0:3.4.1-4.el8_4

Vulnerabilities 1

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1942533