(RHSA-2024:2570) Moderate: gnutls security update

2024-04-3011:38:54

access.redhat.com

gnutls package

gnu transport layer security

minerva side-channel

chain building

cvss score

cve page

tls

ssl

dtls

6.8 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.5%

JSON

The gnutls package provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)
gnutls: potential crash during chain building/verification (CVE-2024-28835)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9x86_64gnutls-utils-debuginfo< 3.8.3-4.el9_4gnutls-utils-debuginfo-3.8.3-4.el9_4.x86_64.rpm
RedHat9ppc64legnutls-debuginfo< 3.8.3-4.el9_4gnutls-debuginfo-3.8.3-4.el9_4.ppc64le.rpm
RedHat9s390xgnutls-dane-debuginfo< 3.8.3-4.el9_4gnutls-dane-debuginfo-3.8.3-4.el9_4.s390x.rpm
RedHat9s390xgnutls< 3.8.3-4.el9_4gnutls-3.8.3-4.el9_4.s390x.rpm
RedHat9ppc64legnutls-utils< 3.8.3-4.el9_4gnutls-utils-3.8.3-4.el9_4.ppc64le.rpm
RedHat9x86_64gnutls-dane< 3.8.3-4.el9_4gnutls-dane-3.8.3-4.el9_4.x86_64.rpm
RedHat9x86_64gnutls< 3.8.3-4.el9_4gnutls-3.8.3-4.el9_4.x86_64.rpm
RedHat9s390xgnutls-utils-debuginfo< 3.8.3-4.el9_4gnutls-utils-debuginfo-3.8.3-4.el9_4.s390x.rpm
RedHat9i686gnutls-dane< 3.8.3-4.el9_4gnutls-dane-3.8.3-4.el9_4.i686.rpm
RedHat9i686gnutls-debuginfo< 3.8.3-4.el9_4gnutls-debuginfo-3.8.3-4.el9_4.i686.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	x86_64	gnutls-utils-debuginfo	< 3.8.3-4.el9_4	gnutls-utils-debuginfo-3.8.3-4.el9_4.x86_64.rpm
RedHat	9	ppc64le	gnutls-debuginfo	< 3.8.3-4.el9_4	gnutls-debuginfo-3.8.3-4.el9_4.ppc64le.rpm
RedHat	9	s390x	gnutls-dane-debuginfo	< 3.8.3-4.el9_4	gnutls-dane-debuginfo-3.8.3-4.el9_4.s390x.rpm
RedHat	9	s390x	gnutls	< 3.8.3-4.el9_4	gnutls-3.8.3-4.el9_4.s390x.rpm
RedHat	9	ppc64le	gnutls-utils	< 3.8.3-4.el9_4	gnutls-utils-3.8.3-4.el9_4.ppc64le.rpm
RedHat	9	x86_64	gnutls-dane	< 3.8.3-4.el9_4	gnutls-dane-3.8.3-4.el9_4.x86_64.rpm
RedHat	9	x86_64	gnutls	< 3.8.3-4.el9_4	gnutls-3.8.3-4.el9_4.x86_64.rpm
RedHat	9	s390x	gnutls-utils-debuginfo	< 3.8.3-4.el9_4	gnutls-utils-debuginfo-3.8.3-4.el9_4.s390x.rpm
RedHat	9	i686	gnutls-dane	< 3.8.3-4.el9_4	gnutls-dane-3.8.3-4.el9_4.i686.rpm
RedHat	9	i686	gnutls-debuginfo	< 3.8.3-4.el9_4	gnutls-debuginfo-3.8.3-4.el9_4.i686.rpm