Skip to content
OpenAdvisories
Medium RLSA-2023:1141 1 CVE

Moderate: gnutls security and bug fix update

Published Mar 8, 2023 · Updated Feb 5, 2026

Summary

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: timing side-channel in the TLS RSA key exchange code (CVE-2023-0361)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* CCM tag length should be limited to known values (BZ#2144535)

* In FIPS mode, gnutls should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator (BZ#2144537)

* dracut-cmdline[554]: Error in GnuTLS initialization: Error while performing self checks i FIPS mode (BZ#2149640)

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 9 gnutls 0:3.7.6-18.el9_1

Vulnerabilities 1

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2144537
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2149640
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2162596