gnutls-3.6.16-8.el8_9.ML.1

エラータID: AXSA:2024-7402:01

Release date: 
Tuesday, January 16, 2024 - 04:52
Subject: 
gnutls-3.6.16-8.el8_9.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: timing side-channel in the RSA-PSK authentication (CVE-2023-5981)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-5981
A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.

Solution: 

Update packages.

CVEs: 
CVE-2023-5981
A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.
Additional Info: 

N/A

Download: 

SRPMS
  1. gnutls-3.6.16-8.el8_9.ML.1.src.rpm
    MD5: 4520eb155cd8d55d4fceb0a387b99209
    SHA-256: b8aa012457e17fa0560b7f5e7e8f7bfb84bc5602a06ad8b59d552ccd8fa1151a
    Size: 5.49 MB

Asianux Server 8 for x86_64
  1. gnutls-3.6.16-8.el8_9.ML.1.i686.rpm
    MD5: c2d2f02d32d9c8920c13115392e30c5a
    SHA-256: 27b4a06f40d2f6a13d948395873359c23f7611cdd5c162ab90d480d3214e54ea
    Size: 1.01 MB
  2. gnutls-3.6.16-8.el8_9.ML.1.x86_64.rpm
    MD5: f92dc20e2d5b8bb053b0f3d7a6934470
    SHA-256: 069e54ce108a56af7154a53fd98e2db60354c9a96c7a3a1bdfe0e7269970bba5
    Size: 0.99 MB
  3. gnutls-c++-3.6.16-8.el8_9.ML.1.i686.rpm
    MD5: 76f249f86334afe8cbf6b78fa9abbbd8
    SHA-256: 2b6ad954048931b12ce8ce50b6c92f9c95bcb531b58337f66d032e0e8830de79
    Size: 49.39 kB
  4. gnutls-c++-3.6.16-8.el8_9.ML.1.x86_64.rpm
    MD5: 01266cee34cd0da202c916d4a390eec0
    SHA-256: 4646a0cdf7ffe331a1d8e59594b05b2bb352d6df8b7aaf0763a319f5a8dfa4d4
    Size: 48.34 kB
  5. gnutls-dane-3.6.16-8.el8_9.ML.1.i686.rpm
    MD5: eb564078d05234e240f9111ed8f5a846
    SHA-256: 3f20aad999b55b33ed94d025a4afcfb1b562b93680acb8d33296eb24e82b64df
    Size: 52.62 kB
  6. gnutls-dane-3.6.16-8.el8_9.ML.1.x86_64.rpm
    MD5: 70ffafba6457161b09553d90351ff9de
    SHA-256: 31f2394e38a8a3ec24f3e221b6b5903c668740b97c9bf9d2318fedb72938d6bd
    Size: 51.73 kB
  7. gnutls-devel-3.6.16-8.el8_9.ML.1.i686.rpm
    MD5: 0bc6eb1f78b230ad959330d281aef6ea
    SHA-256: 7c35aeb7632f764b3dae876181de5b93df353f28dd615db4219fd7fcfbe617ec
    Size: 2.18 MB
  8. gnutls-devel-3.6.16-8.el8_9.ML.1.x86_64.rpm
    MD5: 6a989a604aae2af051d16f030292123c
    SHA-256: b015d27451ee55a600dc103c8a376c658fa32279dd04ef63b3c61f7ea029c025
    Size: 2.18 MB
  9. gnutls-utils-3.6.16-8.el8_9.ML.1.x86_64.rpm
    MD5: 61928cb710c3e261ba1a83ff3f9d1519
    SHA-256: aea8552cb94de5a66d253511354bd10808e622b6efc39ec4bdbba5a72904595f
    Size: 347.76 kB