Gnutls: potential crash during chain building/verification

...

Gnutls: vulnerable to minerva side-channel information leak

...

CVE-2024-28835 affecting package gnutls for versions less than 3.8.3-2

CVE-2024-28835 affecting package gnutls for versions less than 3.8.3-2. A patched version of the package is available...

CVE-2024-28834 affecting package gnutls for versions less than 3.8.3-2

CVE-2024-28834 affecting package gnutls for versions less than 3.8.3-2. A patched version of the package is available...

RHSA-2005:430 Red Hat Security Advisory: gnutls security update

Bulletin has no description...

CBL Mariner 2.0 Security Update: gnutls (CVE-2023-5981)

The version of gnutls installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-5981 advisory. - A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange diffe...

CVE-2024-0553 affecting package gnutls for versions less than 3.7.11-1

CVE-2024-0553 affecting package gnutls for versions less than 3.7.11-1. A patched version of the package is available...

CVE-2023-5981 affecting package gnutls for versions less than 3.7.11-1

CVE-2023-5981 affecting package gnutls for versions less than 3.7.11-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-28834 affecting package gnutls for versions less than 3.7.11-1

CVE-2024-28834 affecting package gnutls for versions less than 3.7.11-1. A patched version of the package is available...

CVE-2024-28835 affecting package gnutls for versions less than 3.7.11-1

CVE-2024-28835 affecting package gnutls for versions less than 3.7.11-1. A patched version of the package is available...

Gnutls: timing side-channel in the rsa-psk authentication

...

Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2024-2619)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2024-2653)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OESA-2024-2263 gnutls security update

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...

OESA-2024-2264 gnutls security update

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...

CLSA-2024-1728056381 gnutls: Fix of CVE-2024-28834

CVE-2024-28834: fix side-channel leak in the deterministic ECDSA...

CLSA-2024-1728056228 gnutls: Fix of CVE-2024-28834

CVE-2024-28834: fix side-channel leak in the deterministic ECDSA...

CLSA-2024-1727373881 gnutls: Fix of CVE-2024-28835

CVE-2024-28835: fix crash when verifying a certificate chain with more than 16 certificates...

EulerOS 2.0 SP8 : gnutls (EulerOS-SA-2024-2467)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of...

The vulnerability of the gnutls_pkcs7_verify function in the pkcs7 component of the GnuTLS library allows a attacker to cause a service failure.

The vulnerability of the gnutlspkcs7verify function in the pkcs7 component of the GnuTLS library is related to the reallocation of memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...