| Summary: | <net-libs/gnutls-3.7.9: Bleichenbacher oracle in the TLS RSA key exchange | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Sam James <sam> |
| Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | CC: | ajak, base-system |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| See Also: | https://gitlab.com/gnutls/gnutls/-/issues/1050 | ||
| Whiteboard: | B3 [glsa+] | ||
| Package list: | Runtime testing required: | --- | |
| Bug Depends on: | 911020 | ||
| Bug Blocks: | |||
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7cf9419beddb1b0f332ca1e276704e2bd1bf5921 commit 7cf9419beddb1b0f332ca1e276704e2bd1bf5921 Author: Sam James <sam@gentoo.org> AuthorDate: 2023-02-11 02:54:05 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2023-02-11 04:18:56 +0000 net-libs/gnutls: add 3.7.9 Bug: https://bugs.gentoo.org/893880 Signed-off-by: Sam James <sam@gentoo.org> net-libs/gnutls/Manifest | 2 + net-libs/gnutls/gnutls-3.7.9.ebuild | 144 ++++++++++++++++++++++++++++++++++++ 2 files changed, 146 insertions(+) The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=da11070e1df7e8b6083409def7c5b1711c535d3c commit da11070e1df7e8b6083409def7c5b1711c535d3c Author: Sam James <sam@gentoo.org> AuthorDate: 2024-12-07 02:58:30 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2024-12-07 02:58:30 +0000 net-libs/gnutls: drop 3.7.8, 3.7.9 Bug: https://bugs.gentoo.org/893880 Signed-off-by: Sam James <sam@gentoo.org> net-libs/gnutls/Manifest | 4 - ...3.8.5-fix-rsaes-pkcs1-systemd-wide-config.patch | 261 --------------------- net-libs/gnutls/gnutls-3.7.8.ebuild | 140 ----------- net-libs/gnutls/gnutls-3.7.9.ebuild | 140 ----------- 4 files changed, 545 deletions(-) |
8 * Version 3.7.9 (released 2023-02-09) 9 10 ** libgnutls: Fix a Bleichenbacher oracle in the TLS RSA key exchange. 11 Reported by Hubert Kario (#1050). Fix developed by Alexander Sosedkin. 12 [GNUTLS-SA-2020-07-14, CVSS: medium] [CVE-2023-0361]