ELSA-2024-2570

ELSA-2024-2570 - gnutls security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2024-05-07

Description

[3.8.3-4]
- Bump release to ensure el9 package is greater than el9_* packages

[3.8.3-3]
- Bump release to ensure el9 package is greater than el9_* packages

[3.8.3-2]
- Fix timing side-channel in deterministic ECDSA (RHEL-28959)
- Fix potential crash during chain building/verification (RHEL-28954)

Related CVEs

CVE-2024-28834

CVE-2024-28835

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	gnutls-3.8.3-4.el9_4.src.rpm	33bc7512af5e8ee2c477fc16496e8c88	-	ol9_aarch64_appstream
	gnutls-3.8.3-4.el9_4.src.rpm	33bc7512af5e8ee2c477fc16496e8c88	-	ol9_aarch64_baseos_latest
	gnutls-3.8.3-4.el9_4.src.rpm	33bc7512af5e8ee2c477fc16496e8c88	-	ol9_aarch64_u4_baseos_patch
	gnutls-3.8.3-4.el9_4.aarch64.rpm	dd4dbebe0b3198decfbf08e1fc613d39	-	ol9_aarch64_baseos_latest
	gnutls-3.8.3-4.el9_4.aarch64.rpm	dd4dbebe0b3198decfbf08e1fc613d39	-	ol9_aarch64_u4_baseos_patch
	gnutls-c++-3.8.3-4.el9_4.aarch64.rpm	427a884924804692c520b3243e6221b8	-	ol9_aarch64_appstream
	gnutls-dane-3.8.3-4.el9_4.aarch64.rpm	ede4461514d5d0622657eaa9565849df	-	ol9_aarch64_appstream
	gnutls-devel-3.8.3-4.el9_4.aarch64.rpm	b52823182f6a52837ff7b23d514fd239	-	ol9_aarch64_appstream
	gnutls-utils-3.8.3-4.el9_4.aarch64.rpm	07028e9d4a68d3ce121c03cd0cfd1752	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	gnutls-3.8.3-4.el9_4.src.rpm	33bc7512af5e8ee2c477fc16496e8c88	-	ol9_x86_64_appstream
	gnutls-3.8.3-4.el9_4.src.rpm	33bc7512af5e8ee2c477fc16496e8c88	-	ol9_x86_64_baseos_latest
	gnutls-3.8.3-4.el9_4.src.rpm	33bc7512af5e8ee2c477fc16496e8c88	-	ol9_x86_64_u4_baseos_patch
	gnutls-3.8.3-4.el9_4.i686.rpm	a70ccea408ae9fae4b930563821f8b5c	-	ol9_x86_64_baseos_latest
	gnutls-3.8.3-4.el9_4.i686.rpm	a70ccea408ae9fae4b930563821f8b5c	-	ol9_x86_64_u4_baseos_patch
	gnutls-3.8.3-4.el9_4.x86_64.rpm	cf70be0dbb15239f76735a608d957767	-	ol9_x86_64_baseos_latest
	gnutls-3.8.3-4.el9_4.x86_64.rpm	cf70be0dbb15239f76735a608d957767	-	ol9_x86_64_u4_baseos_patch
	gnutls-c++-3.8.3-4.el9_4.i686.rpm	cdec6c4af4cd1bccc8b6907963c19ee1	-	ol9_x86_64_appstream
	gnutls-c++-3.8.3-4.el9_4.x86_64.rpm	34f6a1a4ce618439c5d5aa6db0005982	-	ol9_x86_64_appstream
	gnutls-dane-3.8.3-4.el9_4.i686.rpm	e99d4872614ad6d60aaafe55f2e349dc	-	ol9_x86_64_appstream
	gnutls-dane-3.8.3-4.el9_4.x86_64.rpm	93275e579b5dee03ebf0bd63dc9019e7	-	ol9_x86_64_appstream
	gnutls-devel-3.8.3-4.el9_4.i686.rpm	b3edc8973e73bd726384c998ba66124f	-	ol9_x86_64_appstream
	gnutls-devel-3.8.3-4.el9_4.x86_64.rpm	5ecba9119541e57e6223e835143bfc75	-	ol9_x86_64_appstream
	gnutls-utils-3.8.3-4.el9_4.x86_64.rpm	365d58ae28e6aa39f470c28a83235257	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team