(RHSA-2024:2889) Moderate: gnutls security update

2024-05-1611:35:49

access.redhat.com

gnutls

security update

moderate

chain building

verification

minerva

side-channel

information leak

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.9

Confidence

Low

EPSS

Percentile

13.8%

JSON

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

gnutls: potential crash during chain building/verification (CVE-2024-28835)
gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9s390xgnutls< 3.7.6-21.el9_2.3gnutls-3.7.6-21.el9_2.3.s390x.rpm
RedHat9i686gnutls-dane-debuginfo< 3.7.6-21.el9_2.3gnutls-dane-debuginfo-3.7.6-21.el9_2.3.i686.rpm
RedHat9ppc64legnutls< 3.7.6-21.el9_2.3gnutls-3.7.6-21.el9_2.3.ppc64le.rpm
RedHat9ppc64legnutls-debugsource< 3.7.6-21.el9_2.3gnutls-debugsource-3.7.6-21.el9_2.3.ppc64le.rpm
RedHat9x86_64gnutls-debuginfo< 3.7.6-21.el9_2.3gnutls-debuginfo-3.7.6-21.el9_2.3.x86_64.rpm
RedHat9s390xgnutls-dane< 3.7.6-21.el9_2.3gnutls-dane-3.7.6-21.el9_2.3.s390x.rpm
RedHat9ppc64legnutls-utils-debuginfo< 3.7.6-21.el9_2.3gnutls-utils-debuginfo-3.7.6-21.el9_2.3.ppc64le.rpm
RedHat9aarch64gnutls-debuginfo< 3.7.6-21.el9_2.3gnutls-debuginfo-3.7.6-21.el9_2.3.aarch64.rpm
RedHat9i686gnutls-c++< 3.7.6-21.el9_2.3gnutls-c++-3.7.6-21.el9_2.3.i686.rpm
RedHat9s390xgnutls-c++< 3.7.6-21.el9_2.3gnutls-c++-3.7.6-21.el9_2.3.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	s390x	gnutls	< 3.7.6-21.el9_2.3	gnutls-3.7.6-21.el9_2.3.s390x.rpm
RedHat	9	i686	gnutls-dane-debuginfo	< 3.7.6-21.el9_2.3	gnutls-dane-debuginfo-3.7.6-21.el9_2.3.i686.rpm
RedHat	9	ppc64le	gnutls	< 3.7.6-21.el9_2.3	gnutls-3.7.6-21.el9_2.3.ppc64le.rpm
RedHat	9	ppc64le	gnutls-debugsource	< 3.7.6-21.el9_2.3	gnutls-debugsource-3.7.6-21.el9_2.3.ppc64le.rpm
RedHat	9	x86_64	gnutls-debuginfo	< 3.7.6-21.el9_2.3	gnutls-debuginfo-3.7.6-21.el9_2.3.x86_64.rpm
RedHat	9	s390x	gnutls-dane	< 3.7.6-21.el9_2.3	gnutls-dane-3.7.6-21.el9_2.3.s390x.rpm
RedHat	9	ppc64le	gnutls-utils-debuginfo	< 3.7.6-21.el9_2.3	gnutls-utils-debuginfo-3.7.6-21.el9_2.3.ppc64le.rpm
RedHat	9	aarch64	gnutls-debuginfo	< 3.7.6-21.el9_2.3	gnutls-debuginfo-3.7.6-21.el9_2.3.aarch64.rpm
RedHat	9	i686	gnutls-c++	< 3.7.6-21.el9_2.3	gnutls-c++-3.7.6-21.el9_2.3.i686.rpm
RedHat	9	s390x	gnutls-c++	< 3.7.6-21.el9_2.3	gnutls-c++-3.7.6-21.el9_2.3.s390x.rpm