FEDORA-EPEL-2018-b4c337857d — security update for gnutls30

FEDORA-EPEL-2018-b4c337857d created by nmav a year ago for Fedora EPEL 6

obsolete

Updated to 3.5.18

This update has been submitted for testing by nmav. a year ago

nmav edited this update. a year ago

This update has been pushed to testing. a year ago

This update has been obsoleted by [gnutls30-3.5.19-1.el6](https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-83a8fcf606). a year ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

Builds

Settings

Unstable by Karma

-3

Stable by Karma

Dates

submitted

a year ago

in testing

a year ago

modified

a year ago

BZ#1459797 CVE-2017-7507 gnutls30: gnutls: Crash upon receiving well-formed status_request extension [epel-6]

BZ#1619512 CVE-2018-10844 gnutls30: gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls [epel-all]

BZ#1619519 CVE-2018-10845 gnutls30: gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant [epel-all]

BZ#1619524 CVE-2018-10846 gnutls30: gnutls: "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery [epel-all]