ELSA-2017-0574

ELSA-2017-0574 - gnutls security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2017-03-27

Description

[2.12.23-21]
- Upgraded to 2.12.23 to incorporate multiple TLS 1.2 fixes
(#1326389, #1326073, #1323215, #1320982, #1328205, #1321112)
- Modified gnutls-serv to accept --sni-hostname (#1333521)
- Modified gnutls-serv to always reply with an alert message (#1327656)
- Removed support for DSA2 as it causes interoperability issues (#1321112)
- Allow sending and receiving certificates which were not in the
signature algorithms extension (#1328205)
- Removed support for EXPORT ciphersuites (#1337460)
- Raised the minimum acceptable DH size to 1024 (#1335924)
- Restricted the number of alert that can be received during handshake (#1388730)
- Added fixes for OpenPGP parsing issues (CVE-2017-5337, CVE-2017-5336, CVE-2017-5335)
- The exposed (but internal) crypto back-end registration API is deprecated and no
longer functional. The ABI is kept compatible (#1415682)

Related CVEs

CVE-2017-5337

CVE-2017-5336

CVE-2016-8610

CVE-2017-5335

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	gnutls-2.12.23-21.el6.src.rpm	428444894803b9279d218fb3faefd2d8c617a74cb540458ce3efc64d5190751a	ELBA-2018-1868	ol6_i386_latest
	gnutls-2.12.23-21.el6.src.rpm	428444894803b9279d218fb3faefd2d8c617a74cb540458ce3efc64d5190751a	ELBA-2018-1868	ol6_i386_latest_archive
	gnutls-2.12.23-21.el6.src.rpm	428444894803b9279d218fb3faefd2d8c617a74cb540458ce3efc64d5190751a	ELBA-2018-1868	ol6_u9_i386_base
	gnutls-2.12.23-21.el6.i686.rpm	1ea756a6d31f812835db7c31db2e3b6d5dfc9509a7328f0dd1e975a656ab5426	ELBA-2018-1868	ol6_i386_latest
	gnutls-2.12.23-21.el6.i686.rpm	1ea756a6d31f812835db7c31db2e3b6d5dfc9509a7328f0dd1e975a656ab5426	ELBA-2018-1868	ol6_i386_latest_archive
	gnutls-2.12.23-21.el6.i686.rpm	1ea756a6d31f812835db7c31db2e3b6d5dfc9509a7328f0dd1e975a656ab5426	ELBA-2018-1868	ol6_u9_i386_base
	gnutls-devel-2.12.23-21.el6.i686.rpm	6a47bb8d1d2bdb1aa38789905764d15bd1e7684224af6a4a4a7ee8d58399b4bb	ELBA-2018-1868	ol6_i386_latest
	gnutls-devel-2.12.23-21.el6.i686.rpm	6a47bb8d1d2bdb1aa38789905764d15bd1e7684224af6a4a4a7ee8d58399b4bb	ELBA-2018-1868	ol6_i386_latest_archive
	gnutls-devel-2.12.23-21.el6.i686.rpm	6a47bb8d1d2bdb1aa38789905764d15bd1e7684224af6a4a4a7ee8d58399b4bb	ELBA-2018-1868	ol6_u9_i386_base
	gnutls-guile-2.12.23-21.el6.i686.rpm	935540c73633c2796fa9eab2b8f8eeb621294b5c3df9324f1140d1acb3326e08	ELBA-2018-1868	ol6_i386_latest
	gnutls-guile-2.12.23-21.el6.i686.rpm	935540c73633c2796fa9eab2b8f8eeb621294b5c3df9324f1140d1acb3326e08	ELBA-2018-1868	ol6_i386_latest_archive
	gnutls-guile-2.12.23-21.el6.i686.rpm	935540c73633c2796fa9eab2b8f8eeb621294b5c3df9324f1140d1acb3326e08	ELBA-2018-1868	ol6_u9_i386_base
	gnutls-utils-2.12.23-21.el6.i686.rpm	6f0a7751056a8abac89917a05bef6337b5afddb2b0154080dba3400b69249760	ELBA-2018-1868	ol6_i386_latest
	gnutls-utils-2.12.23-21.el6.i686.rpm	6f0a7751056a8abac89917a05bef6337b5afddb2b0154080dba3400b69249760	ELBA-2018-1868	ol6_i386_latest_archive
	gnutls-utils-2.12.23-21.el6.i686.rpm	6f0a7751056a8abac89917a05bef6337b5afddb2b0154080dba3400b69249760	ELBA-2018-1868	ol6_u9_i386_base
Oracle Linux 6 (x86_64)	gnutls-2.12.23-21.el6.src.rpm	428444894803b9279d218fb3faefd2d8c617a74cb540458ce3efc64d5190751a	ELBA-2018-1868	ol6_u9_x86_64_base
	gnutls-2.12.23-21.el6.src.rpm	428444894803b9279d218fb3faefd2d8c617a74cb540458ce3efc64d5190751a	ELBA-2018-1868	ol6_x86_64_latest
	gnutls-2.12.23-21.el6.src.rpm	428444894803b9279d218fb3faefd2d8c617a74cb540458ce3efc64d5190751a	ELBA-2018-1868	ol6_x86_64_latest_archive
	gnutls-2.12.23-21.el6.i686.rpm	1ea756a6d31f812835db7c31db2e3b6d5dfc9509a7328f0dd1e975a656ab5426	ELBA-2018-1868	ol6_u9_x86_64_base
	gnutls-2.12.23-21.el6.i686.rpm	1ea756a6d31f812835db7c31db2e3b6d5dfc9509a7328f0dd1e975a656ab5426	ELBA-2018-1868	ol6_x86_64_latest
	gnutls-2.12.23-21.el6.i686.rpm	1ea756a6d31f812835db7c31db2e3b6d5dfc9509a7328f0dd1e975a656ab5426	ELBA-2018-1868	ol6_x86_64_latest_archive
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	exadata_dbserver_12.2.1.1.1_x86_64_base
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	exadata_dbserver_12.2.1.1.2_x86_64_base
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	exadata_dbserver_12.2.1.1.3_x86_64_base
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	exadata_dbserver_12.2.1.1.4_x86_64_base
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	exadata_dbserver_12.2.1.1.5_x86_64_base
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	exadata_dbserver_12.2.1.1.6_x86_64_base
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	exadata_dbserver_12.2.1.1.7_x86_64_base
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	exadata_dbserver_12.2.1.1.8_x86_64_base
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	exadata_dbserver_18.1.0.0.0_x86_64_base
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	exadata_dbserver_18.1.1.0.0_x86_64_base
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	exadata_dbserver_18.1.2.0.0_x86_64_base
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	exadata_dbserver_18.1.3.0.0_x86_64_base
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	exadata_dbserver_18.1.4.0.0_x86_64_base
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	exadata_dbserver_18.1.5.0.0_x86_64_base
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	exadata_dbserver_18.1.6.0.0_x86_64_base
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	exadata_dbserver_18.1.7.0.0_x86_64_base
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	ol6_u9_x86_64_base
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	ol6_x86_64_latest
	gnutls-2.12.23-21.el6.x86_64.rpm	d1c53eda38b302d127b756b7ccd986b9e5e09a298845d2d125bb0c0fd1de6e9b	ELBA-2018-1868	ol6_x86_64_latest_archive
	gnutls-devel-2.12.23-21.el6.i686.rpm	6a47bb8d1d2bdb1aa38789905764d15bd1e7684224af6a4a4a7ee8d58399b4bb	ELBA-2018-1868	ol6_u9_x86_64_base
	gnutls-devel-2.12.23-21.el6.i686.rpm	6a47bb8d1d2bdb1aa38789905764d15bd1e7684224af6a4a4a7ee8d58399b4bb	ELBA-2018-1868	ol6_x86_64_latest
	gnutls-devel-2.12.23-21.el6.i686.rpm	6a47bb8d1d2bdb1aa38789905764d15bd1e7684224af6a4a4a7ee8d58399b4bb	ELBA-2018-1868	ol6_x86_64_latest_archive
	gnutls-devel-2.12.23-21.el6.x86_64.rpm	10191e4f3e66d34e6afe3870d79ec34e344bc9e27c556195801011b44a19f77f	ELBA-2018-1868	ol6_u9_x86_64_base
	gnutls-devel-2.12.23-21.el6.x86_64.rpm	10191e4f3e66d34e6afe3870d79ec34e344bc9e27c556195801011b44a19f77f	ELBA-2018-1868	ol6_x86_64_latest
	gnutls-devel-2.12.23-21.el6.x86_64.rpm	10191e4f3e66d34e6afe3870d79ec34e344bc9e27c556195801011b44a19f77f	ELBA-2018-1868	ol6_x86_64_latest_archive
	gnutls-guile-2.12.23-21.el6.i686.rpm	935540c73633c2796fa9eab2b8f8eeb621294b5c3df9324f1140d1acb3326e08	ELBA-2018-1868	ol6_u9_x86_64_base
	gnutls-guile-2.12.23-21.el6.i686.rpm	935540c73633c2796fa9eab2b8f8eeb621294b5c3df9324f1140d1acb3326e08	ELBA-2018-1868	ol6_x86_64_latest
	gnutls-guile-2.12.23-21.el6.i686.rpm	935540c73633c2796fa9eab2b8f8eeb621294b5c3df9324f1140d1acb3326e08	ELBA-2018-1868	ol6_x86_64_latest_archive
	gnutls-guile-2.12.23-21.el6.x86_64.rpm	b231742d895e5bdcd552da193f46c730336bfa5f9544bb0718860d69595130b0	ELBA-2018-1868	ol6_u9_x86_64_base
	gnutls-guile-2.12.23-21.el6.x86_64.rpm	b231742d895e5bdcd552da193f46c730336bfa5f9544bb0718860d69595130b0	ELBA-2018-1868	ol6_x86_64_latest
	gnutls-guile-2.12.23-21.el6.x86_64.rpm	b231742d895e5bdcd552da193f46c730336bfa5f9544bb0718860d69595130b0	ELBA-2018-1868	ol6_x86_64_latest_archive
	gnutls-utils-2.12.23-21.el6.x86_64.rpm	c7db83e1eea5e16ee0565dddcbbf0448aa6372662362e43cf70d9e10a3c4027d	ELBA-2018-1868	ol6_u9_x86_64_base
	gnutls-utils-2.12.23-21.el6.x86_64.rpm	c7db83e1eea5e16ee0565dddcbbf0448aa6372662362e43cf70d9e10a3c4027d	ELBA-2018-1868	ol6_x86_64_latest
	gnutls-utils-2.12.23-21.el6.x86_64.rpm	c7db83e1eea5e16ee0565dddcbbf0448aa6372662362e43cf70d9e10a3c4027d	ELBA-2018-1868	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team