ELSA-2024-2570

ELSA-2024-2570 - gnutls security update

Type:SECURITY
Impact:MODERATE
Release Date:2024-05-07

Description


[3.8.3-4]
- Bump release to ensure el9 package is greater than el9_* packages

[3.8.3-3]
- Bump release to ensure el9 package is greater than el9_* packages

[3.8.3-2]
- Fix timing side-channel in deterministic ECDSA (RHEL-28959)
- Fix potential crash during chain building/verification (RHEL-28954)


Related CVEs


CVE-2024-28834
CVE-2024-28835

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) gnutls-3.8.3-4.el9_4.src.rpm5a368a62d26f74bbe03434d8131be0d3be5d4dbaac243d0f7f4e445b6c1a2bc1-ol9_aarch64_appstream
gnutls-3.8.3-4.el9_4.src.rpm5a368a62d26f74bbe03434d8131be0d3be5d4dbaac243d0f7f4e445b6c1a2bc1-ol9_aarch64_baseos_latest
gnutls-3.8.3-4.el9_4.src.rpm5a368a62d26f74bbe03434d8131be0d3be5d4dbaac243d0f7f4e445b6c1a2bc1-ol9_aarch64_u4_baseos_patch
gnutls-3.8.3-4.el9_4.src.rpm5a368a62d26f74bbe03434d8131be0d3be5d4dbaac243d0f7f4e445b6c1a2bc1-ol9_aarch64_u5_baseos_base
gnutls-3.8.3-4.el9_4.aarch64.rpme5a47635ae4b82619fb46a8f667413c95eb26b3062d9745c6a5acd66ea84e4e2-ol9_aarch64_baseos_latest
gnutls-3.8.3-4.el9_4.aarch64.rpme5a47635ae4b82619fb46a8f667413c95eb26b3062d9745c6a5acd66ea84e4e2-ol9_aarch64_u4_baseos_patch
gnutls-3.8.3-4.el9_4.aarch64.rpme5a47635ae4b82619fb46a8f667413c95eb26b3062d9745c6a5acd66ea84e4e2-ol9_aarch64_u5_baseos_base
gnutls-c++-3.8.3-4.el9_4.aarch64.rpm828e42fafe9c2e65bed37e60157ae35cc275590fc7c626985177f57623a2207a-ol9_aarch64_appstream
gnutls-dane-3.8.3-4.el9_4.aarch64.rpma7cb730e2ee98443924786572711a4d1d38241286bd252133fe4e8ad5a6290b4-ol9_aarch64_appstream
gnutls-devel-3.8.3-4.el9_4.aarch64.rpmae1cc8a5bb6350823d9b1c8ad399236a415a34cc6c1af439ff29a82e5d795618-ol9_aarch64_appstream
gnutls-utils-3.8.3-4.el9_4.aarch64.rpm1ac00f53c3d253877282fb9d5bcb76b24fd6b08c46a2497c4d3c782fd8e2bf96-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) gnutls-3.8.3-4.el9_4.src.rpm5a368a62d26f74bbe03434d8131be0d3be5d4dbaac243d0f7f4e445b6c1a2bc1-ol9_x86_64_appstream
gnutls-3.8.3-4.el9_4.src.rpm5a368a62d26f74bbe03434d8131be0d3be5d4dbaac243d0f7f4e445b6c1a2bc1-ol9_x86_64_baseos_latest
gnutls-3.8.3-4.el9_4.src.rpm5a368a62d26f74bbe03434d8131be0d3be5d4dbaac243d0f7f4e445b6c1a2bc1-ol9_x86_64_u4_baseos_patch
gnutls-3.8.3-4.el9_4.src.rpm5a368a62d26f74bbe03434d8131be0d3be5d4dbaac243d0f7f4e445b6c1a2bc1-ol9_x86_64_u5_baseos_base
gnutls-3.8.3-4.el9_4.i686.rpm16d9db1d0ea1d90a1ec90a40985d371977593624309cd6bc2601e9a3a050feae-ol9_x86_64_baseos_latest
gnutls-3.8.3-4.el9_4.i686.rpm16d9db1d0ea1d90a1ec90a40985d371977593624309cd6bc2601e9a3a050feae-ol9_x86_64_u4_baseos_patch
gnutls-3.8.3-4.el9_4.i686.rpm16d9db1d0ea1d90a1ec90a40985d371977593624309cd6bc2601e9a3a050feae-ol9_x86_64_u5_baseos_base
gnutls-3.8.3-4.el9_4.x86_64.rpm49abb108f8d952f1c5f354c410de68dd48eec5dbc221349d64a2c6bc4dbbbfec-ol9_x86_64_baseos_latest
gnutls-3.8.3-4.el9_4.x86_64.rpm49abb108f8d952f1c5f354c410de68dd48eec5dbc221349d64a2c6bc4dbbbfec-ol9_x86_64_u4_baseos_patch
gnutls-3.8.3-4.el9_4.x86_64.rpm49abb108f8d952f1c5f354c410de68dd48eec5dbc221349d64a2c6bc4dbbbfec-ol9_x86_64_u5_baseos_base
gnutls-c++-3.8.3-4.el9_4.i686.rpmb04fbb1ec124c66ac9f22bece74c4be351ac5ef561589ac152cf249efc397841-ol9_x86_64_appstream
gnutls-c++-3.8.3-4.el9_4.x86_64.rpm8a97747484c0216c2d6c73bd0400cd267a796fbe379b3815dbee4428bf4f2126-ol9_x86_64_appstream
gnutls-dane-3.8.3-4.el9_4.i686.rpmc7b1b62b68b821e699e4fdc876f1b7fefb246256409f78cc9f2f09d0cf324457-ol9_x86_64_appstream
gnutls-dane-3.8.3-4.el9_4.x86_64.rpm9e8be1c30b1ec938e71a80a98ac8edfa37177d067ce6b3254ae6e75559fbc7e0-ol9_x86_64_appstream
gnutls-devel-3.8.3-4.el9_4.i686.rpmdea5ea750fc34119fdcf5b4dca159b5263cc52e95356b86db491aa8bf499af80-ol9_x86_64_appstream
gnutls-devel-3.8.3-4.el9_4.x86_64.rpm2e802b66de07d5ff12331b8ec4d40a9300fa4d97ff4e2ac4c4ee94d08100aade-ol9_x86_64_appstream
gnutls-utils-3.8.3-4.el9_4.x86_64.rpm94b7cf5b1699150d7aa96c8fbe9d7367e17b25cb93550db95b70bf2102c39737-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete