Lucene search

K
redhatRedHatRHSA-2024:1784
HistoryApr 11, 2024 - 3:26 p.m.

(RHSA-2024:1784) Moderate: gnutls security update

2024-04-1115:26:54
access.redhat.com
14
gnutls
package update
moderate
security
side-channel
information leak
cve
cvss score

6.8 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.2%

The gnutls package provide the GNU Transport Layer Security (GnuTLS) library,
which implements cryptographic algorithms and protocols such as SSL, TLS, and
DTLS.

This package update fixes a timing side-channel in deterministic ECDSA.

Security Fix(es):

  • gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.