TI-2018-07661 CVE-2018-10845 · GHSA-m5px-2q2g-hxc2
Broken or risky cryptographic algorithm in [UNKNOWN] gnutls
Priority LOW 33
It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack.
RHSA-2018:3050
gnutls security, bug fix, and enhancement update
Released 2018-10-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) gnutls-3.3.29-8.el7, gnutls-dane-3.3.29-8.el7, gnutls-utils-3.3.29-8.el7
- Red Hat Enterprise Linux Client Optional (v. 7) gnutls-c++-3.3.29-8.el7, gnutls-devel-3.3.29-8.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) gnutls-3.3.29-8.el7, gnutls-dane-3.3.29-8.el7, gnutls-utils-3.3.29-8.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) gnutls-c++-3.3.29-8.el7, gnutls-devel-3.3.29-8.el7
- Red Hat Enterprise Linux Server (v. 7) gnutls-3.3.29-8.el7, gnutls-3.3.29-8.el7.ppc, gnutls-c++-3.3.29-8.el7 +6
- Red Hat Enterprise Linux Workstation (v. 7) gnutls-3.3.29-8.el7, gnutls-c++-3.3.29-8.el7, gnutls-dane-3.3.29-8.el7 +2
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) gnutls-3.3.29-8.el7, gnutls-c++-3.3.29-8.el7, gnutls-dane-3.3.29-8.el7 +2
Fixes 3 records
TI-2018-07660 CVE-2018-10844 · GHSA-9779-jfg9-frm3
Broken or risky cryptographic algorithm in [UNKNOWN] gnutls
Priority LOW 33
It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack.
TI-2018-07662 CVE-2018-10846 · GHSA-qgw6-cgvx-vw2g
Broken or risky cryptographic algorithm in [UNKNOWN] gnutls
Priority LOW 25
A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found.