Skip to content
OpenAdvisories
Medium RLSA-2023:1569 1 CVE

Moderate: gnutls security and bug fix update

Published Apr 6, 2023 · Updated Feb 5, 2026

Summary

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: timing side-channel in the TLS RSA key exchange code (CVE-2023-0361)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* trap invalid opcode ip:7feef81809fe sp:7fee997419c0 error:0 in libgnutls.so.30.28.2[7feef8040000+1dd000] (BZ#2131152)

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 8 gnutls 0:3.6.16-6.el8_7

Vulnerabilities 1

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2131152
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2162596