Red Hat Security Advisory

RHSA-2024:2889

gnutls security update

Released 2024-05-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.2) gnutls-c++-3.7.6-21.el9_2.3, gnutls-dane-3.7.6-21.el9_2.3, gnutls-devel-3.7.6-21.el9_2.3 +1
Red Hat Enterprise Linux BaseOS EUS (v.9.2) gnutls-3.7.6-21.el9_2.3

Fixes 2 records

TI-2024-19046 CVE-2024-28834 · GHSA-frvc-6356-58xm

Gnutls: vulnerable to minerva side-channel information leak

LOW 25

A flaw was found in GnuTLS.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00724 Published 2024-03-21 Partial fix · 3.6.16-8.el8_9.3, 3.6.16-5.el8_6.4 +4 CWE-327

TI-2024-19047 CVE-2024-28835 · GHSA-ffpf-5h29-w36w

Gnutls: potential crash during chain building/verification

LOW 23

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command.

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00389 Published 2024-03-21 Partial fix · 3.7.6-23.el9_3.4, 3.8.3-4.el9_4 +1 CWE-248