Red Hat Security Advisory

RHSA-2024:2570

gnutls security update

Released 2024-04-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) gnutls-c++-3.8.3-4.el9_4, gnutls-dane-3.8.3-4.el9_4, gnutls-devel-3.8.3-4.el9_4 +1
Red Hat Enterprise Linux BaseOS (v. 9) gnutls-3.8.3-4.el9_4

Fixes 2 records

TI-2024-19046 CVE-2024-28834 · GHSA-frvc-6356-58xm

Gnutls: vulnerable to minerva side-channel information leak

LOW 25

A flaw was found in GnuTLS.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00724 Published 2024-03-21 Partial fix · 3.6.16-8.el8_9.3, 3.6.16-5.el8_6.4 +4 CWE-327

TI-2024-19047 CVE-2024-28835 · GHSA-ffpf-5h29-w36w

Gnutls: potential crash during chain building/verification

LOW 23

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command.

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00389 Published 2024-03-21 Partial fix · 3.7.6-23.el9_3.4, 3.8.3-4.el9_4 +1 CWE-248