RHSA-2024:0533: Moderate: gnutls security update
Moderate: gnutls security update
Other sources
The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.Security Fix(es): gnutls: timing side-channel in the RSA-PSK authentication (CVE-2023-5981) gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553) gnutls: rejects certificate chain with distributed trust (CVE-2024-0567) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:0533?
The severity of RHSA-2024:0533 is classified as Moderate.
How do I fix RHSA-2024:0533?
To fix RHSA-2024:0533, you should update the gnutls packages to version 3.7.6-23.el9_3.3.
Which systems are affected by RHSA-2024:0533?
RHSA-2024:0533 affects multiple products including Red Hat Enterprise Linux for Power, ARM 64, and various gnutls package versions.
What vulnerabilities does RHSA-2024:0533 address?
RHSA-2024:0533 addresses a timing side-channel vulnerability in the RSA-PSK authentication.
Is the update for RHSA-2024:0533 mandatory?
Yes, it is recommended to apply the update for RHSA-2024:0533 to mitigate potential security risks.