Lucene search

K
almalinuxAlmaLinuxALSA-2024:0155
HistoryJan 10, 2024 - 12:00 a.m.

Moderate: gnutls security update

2024-01-1000:00:00
errata.almalinux.org
20
gnutls
security update
timing side-channel
rsa-psk authentication
cve-2023-5981
cryptographic algorithms
protocols
ssl
tls
dtls

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.3%

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

  • gnutls: timing side-channel in the RSA-PSK authentication (CVE-2023-5981)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.