(RHSA-2024:1879) Moderate: gnutls security update

2024-04-1800:58:47

access.redhat.com

gnutls

security update

moderate impact

cve-2024-28834

cve-2024-28835

cryptographic algorithms

ssl

tls

dtls

minerva side-channel

crash

chain building

verification

cvss score

acknowledgments

references section

5.1 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)
gnutls: potential crash during chain building/verification (CVE-2024-28835)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9x86_64gnutls-c++-debuginfo< 3.7.6-23.el9_3.4gnutls-c++-debuginfo-3.7.6-23.el9_3.4.x86_64.rpm
RedHat9aarch64gnutls< 3.7.6-23.el9_3.4gnutls-3.7.6-23.el9_3.4.aarch64.rpm
RedHat9aarch64gnutls-c++-debuginfo< 3.7.6-23.el9_3.4gnutls-c++-debuginfo-3.7.6-23.el9_3.4.aarch64.rpm
RedHat9aarch64gnutls-c++< 3.7.6-23.el9_3.4gnutls-c++-3.7.6-23.el9_3.4.aarch64.rpm
RedHat9ppc64legnutls-debugsource< 3.7.6-23.el9_3.4gnutls-debugsource-3.7.6-23.el9_3.4.ppc64le.rpm
RedHat9ppc64legnutls< 3.7.6-23.el9_3.4gnutls-3.7.6-23.el9_3.4.ppc64le.rpm
RedHat9ppc64legnutls-c++< 3.7.6-23.el9_3.4gnutls-c++-3.7.6-23.el9_3.4.ppc64le.rpm
RedHat9i686gnutls< 3.7.6-23.el9_3.4gnutls-3.7.6-23.el9_3.4.i686.rpm
RedHat9x86_64gnutls-debuginfo< 3.7.6-23.el9_3.4gnutls-debuginfo-3.7.6-23.el9_3.4.x86_64.rpm
RedHat9s390xgnutls-utils< 3.7.6-23.el9_3.4gnutls-utils-3.7.6-23.el9_3.4.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	x86_64	gnutls-c++-debuginfo	< 3.7.6-23.el9_3.4	gnutls-c++-debuginfo-3.7.6-23.el9_3.4.x86_64.rpm
RedHat	9	aarch64	gnutls	< 3.7.6-23.el9_3.4	gnutls-3.7.6-23.el9_3.4.aarch64.rpm
RedHat	9	aarch64	gnutls-c++-debuginfo	< 3.7.6-23.el9_3.4	gnutls-c++-debuginfo-3.7.6-23.el9_3.4.aarch64.rpm
RedHat	9	aarch64	gnutls-c++	< 3.7.6-23.el9_3.4	gnutls-c++-3.7.6-23.el9_3.4.aarch64.rpm
RedHat	9	ppc64le	gnutls-debugsource	< 3.7.6-23.el9_3.4	gnutls-debugsource-3.7.6-23.el9_3.4.ppc64le.rpm
RedHat	9	ppc64le	gnutls	< 3.7.6-23.el9_3.4	gnutls-3.7.6-23.el9_3.4.ppc64le.rpm
RedHat	9	ppc64le	gnutls-c++	< 3.7.6-23.el9_3.4	gnutls-c++-3.7.6-23.el9_3.4.ppc64le.rpm
RedHat	9	i686	gnutls	< 3.7.6-23.el9_3.4	gnutls-3.7.6-23.el9_3.4.i686.rpm
RedHat	9	x86_64	gnutls-debuginfo	< 3.7.6-23.el9_3.4	gnutls-debuginfo-3.7.6-23.el9_3.4.x86_64.rpm
RedHat	9	s390x	gnutls-utils	< 3.7.6-23.el9_3.4	gnutls-utils-3.7.6-23.el9_3.4.s390x.rpm