Описание
ELSA-2019-3600: gnutls security, bug fix, and enhancement update (MODERATE)
[3.6.8-8]
- Use fallback random function for RSA blinding in FIPS selftests
[3.6.8-7]
- Fix deterministic signature creation in selftests
[3.6.8-6]
- Treat login error more gracefully when enumerating PKCS#11 tokens (#1705478)
- Use deterministic ECDSA/DSA in FIPS selftests (#1716560)
- Add gnutls_aead_cipher_{encrypt,decrypt}v2 functions (#1684461)
[3.6.8-5]
- Avoid UB when encrypting session tickets
[3.6.8-4]
- Add RNG continuous test under FIPS
[3.6.8-3]
- Follow-up fix on multiple key updates handling (#1673975)
[3.6.8-2]
- Run FIPS AES self-tests over overridden algorithms
[3.6.8-1]
- Update to upstream 3.6.8 release
[3.6.5-4]
- Fixed FIPS signatures self tests (#1680509)
[3.6.5-3]
- Fixed CVE-2019-3829 (#1693285)
- Fixed CVE-2019-3836 (#1693288)
- Added explicit BuildRequires for nettle-devel >= 3.4.1
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
gnutls
3.6.8-8.el8
gnutls-c++
3.6.8-8.el8
gnutls-dane
3.6.8-8.el8
gnutls-devel
3.6.8-8.el8
gnutls-utils
3.6.8-8.el8
Oracle Linux x86_64
gnutls
3.6.8-8.el8
gnutls-c++
3.6.8-8.el8
gnutls-dane
3.6.8-8.el8
gnutls-devel
3.6.8-8.el8
gnutls-utils
3.6.8-8.el8
Связанные CVE
Связанные уязвимости
It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.
It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.
It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.