Red Hat Security Advisory 2024-1108-03 - An update for gnutls is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.
87875b258b867bae20b472873140d8eb98059d9949870fac5d5c939863109902
Red Hat Security Advisory 2024-1082-03 - An update for gnutls is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.
dab80b2b40347371cff44683a98b336d57121160269d4189f8cf03288f84c5e5
Red Hat Security Advisory 2024-0796-03 - An update for gnutls is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.
7570f3c5948651f806474701b41708ae0ba3cfcf824ea6c83fa3a242a897d005
Red Hat Security Advisory 2024-0627-03 - An update for gnutls is now available for Red Hat Enterprise Linux 8.
43b8c6f0c996104a580582549a6221ba164d17c2dda7aad6759bdc801e19bedb
Ubuntu Security Notice 6593-1 - It was discovered that GnuTLS had a timing side-channel when processing malformed ciphertexts in RSA-PSK ClientKeyExchange. A remote attacker could possibly use this issue to recover sensitive information. It was discovered that GnuTLS incorrectly handled certain certificate chains with a cross-signing loop. A remote attacker could possibly use this issue to cause GnuTLS to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10.
3bbd8b60bf24fb02c31deebbe0c2660004b5df5eb22635d170194dc1cefc57f3
GnuTLS is a secure communications library implementing the SSL and TLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols, as well as APIs to parse and write X.509, PKCS #12, OpenPGP, and other required structures. It is intended to be portable and efficient with a focus on security and interoperability.
f74fc5954b27d4ec6dfbb11dea987888b5b124289a3703afcada0ee520f4173e