Red Hat Security Advisory

RHSA-2024:0451

gnutls security update

Released 2024-01-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.2) gnutls-c++-3.7.6-21.el9_2.1, gnutls-dane-3.7.6-21.el9_2.1, gnutls-devel-3.7.6-21.el9_2.1 +1
Red Hat Enterprise Linux BaseOS EUS (v.9.2) gnutls-3.7.6-21.el9_2.1

Fixes 1 record

TI-2023-05511 CVE-2023-5981 · GHSA-jvj3-gqjm-cg8p

Gnutls: timing side-channel in the rsa-psk authentication

LOW 29

A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01267 Published 2023-11-28 Partial fix · 3.6.16-8.el8_9, 3.6.16-5.el8_6.2 +38 CWE-208