Red Hat Security Advisory

RHSA-2021:4451

gnutls and nettle security, bug fix, and enhancement update

Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) gnutls-c++-3.6.16-4.el8, gnutls-dane-3.6.16-4.el8, gnutls-devel-3.6.16-4.el8 +2
Red Hat Enterprise Linux BaseOS (v. 8) gnutls-3.6.16-4.el8, nettle-3.4.1-7.el8

TI-2021-03527 CVE-2021-20232 · GHSA-p947-gfm7-f4g7

MEDIUM 55

A flaw was found in gnutls.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03377 Published 2021-03-12 Fixed CWE-416

TI-2021-03526 CVE-2021-20231 · GHSA-mqq9-xchh-h97q

MEDIUM 48

A flaw was found in gnutls.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03678 Published 2021-03-12 Fixed CWE-416

TI-2021-02529 CVE-2021-3580 · GHSA-52fp-4722-wcjw

MEDIUM 44

A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02708 Published 2021-08-05 Partial fix CWE-20