FEDORA-EPEL-2018-b4c337857d — security update for gnutls30

FEDORA-EPEL-2018-b4c337857d created by nmav 2 years ago for Fedora EPEL 6

obsolete

Updated to 3.5.18

This update has been submitted for testing by nmav.

nmav edited this update.

This update has been pushed to testing.

This update has been obsoleted by gnutls30-3.5.19-1.el6.

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

Builds

Settings

Unstable by Karma

-3

Stable by Karma

Dates

submitted

2 years ago

in testing

2 years ago

modified

2 years ago

BZ#1459797 CVE-2017-7507 gnutls30: gnutls: Crash upon receiving well-formed status_request extension [epel-6]

BZ#1619512 CVE-2018-10844 gnutls30: gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls [epel-all]

BZ#1619519 CVE-2018-10845 gnutls30: gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant [epel-all]

BZ#1619524 CVE-2018-10846 gnutls30: gnutls: "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery [epel-all]