Red Hat Security AdvisoryRHSA-2013:0588
gnutls security update
Released 2013-03-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) gnutls-1.4.1-10.el5_9.1, gnutls-1.4.1-10.el5_9.1.i386, gnutls-1.4.1-10.el5_9.1.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 6) gnutls-2.8.5-10.el6_4.1, gnutls-utils-2.8.5-10.el6_4.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) gnutls-2.8.5-10.el6_4.1, gnutls-devel-2.8.5-10.el6_4.1, gnutls-guile-2.8.5-10.el6_4.1
- Red Hat Enterprise Linux HPC Node (v. 6) gnutls-2.8.5-10.el6_4.1, gnutls-utils-2.8.5-10.el6_4.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) gnutls-2.8.5-10.el6_4.1, gnutls-devel-2.8.5-10.el6_4.1, gnutls-guile-2.8.5-10.el6_4.1
- Red Hat Enterprise Linux Server (v. 6) gnutls-2.8.5-10.el6_4.1, gnutls-2.8.5-10.el6_4.1.ppc, gnutls-devel-2.8.5-10.el6_4.1 +2
- Red Hat Enterprise Linux Server Optional (v. 6) gnutls-2.8.5-10.el6_4.1, gnutls-guile-2.8.5-10.el6_4.1, gnutls-guile-2.8.5-10.el6_4.1.ppc
- Red Hat Enterprise Linux Workstation (v. 6) gnutls-2.8.5-10.el6_4.1, gnutls-devel-2.8.5-10.el6_4.1, gnutls-utils-2.8.5-10.el6_4.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) gnutls-2.8.5-10.el6_4.1, gnutls-guile-2.8.5-10.el6_4.1
Fixes 1 record
Priority LOW 28
The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.0644 · Published 2013-02-08 · Partial fix CWE-310
