Alerts This Week
Warning Icon 1 1,153
Alerts This Week
Warning Icon 1 1,153

Oracle Linux 9 ELSA-2024-2570 Moderate: Gnutls Security Issues Fix

oracle
Calendar Grey May 8, 2024
Oracle Linux Logo Esm H88
The Oracle Linux Security Update ELSA-2024-2570 focuses on gnutls modifications that rectify moderate-severity vulnerabilities and include necessary patches.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

[3.8.3-4] - Bump release to ensure el9 package is greater than el9_* packages [3.8.3-3] - Bump release to ensure el9 package is greater than el9_* packages [3.8.3-2] - Fix timing side-channel in deterministic ECDSA (RHEL-28959) - Fix potential crash during chain building/verification (RHEL-28954) [3.8.3-1] - Update to gnutls 3.8.3 (RHEL-14891) [3.8.2-3] - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.3 as well (RHEL-18498) [3.8.2-2] - Bump nettle dependency to 3.9.1 - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498) [3.8.2-1] - Update to gnutls 3.8.2 (RHEL-14891)

Topics%20covered

Topics Covered

security advisory moderate security issue software update gnutls threat fix Oracle Linux

SRPMs

http://oss.oracle.com/ol9/SRPMS-updates//gnutls-3.8.3-4.el9_4.src.rpm

x86_64

gnutls-3.8.3-4.el9_4.i686.rpm gnutls-3.8.3-4.el9_4.x86_64.rpm gnutls-c++-3.8.3-4.el9_4.i686.rpm gnutls-c++-3.8.3-4.el9_4.x86_64.rpm gnutls-dane-3.8.3-4.el9_4.i686.rpm gnutls-dane-3.8.3-4.el9_4.x86_64.rpm gnutls-devel-3.8.3-4.el9_4.i686.rpm gnutls-devel-3.8.3-4.el9_4.x86_64.rpm gnutls-utils-3.8.3-4.el9_4.x86_64.rpm

aarch64

gnutls-3.8.3-4.el9_4.aarch64.rpm gnutls-c++-3.8.3-4.el9_4.aarch64.rpm gnutls-dane-3.8.3-4.el9_4.aarch64.rpm gnutls-devel-3.8.3-4.el9_4.aarch64.rpm gnutls-utils-3.8.3-4.el9_4.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2024-28834 CVE-2024-28835

Topics%20covered

Topics Covered

security advisory moderate security issue software update gnutls threat fix Oracle Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here