FEDORA-EPEL-2018-83a8fcf606 — security update for gnutls30

stable

gnutls30-3.5.19-1.el6

FEDORA-EPEL-2018-83a8fcf606 created by nmav 6 years ago for Fedora EPEL 6

Updated to 3.5.19

Updated to 3.5.18

This update has been submitted for testing by nmav.

6 years ago

This update has obsoleted gnutls30-3.5.18-1.el6, and has inherited its bugs and notes.

6 years ago

This update has been pushed to testing.

6 years ago

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

6 years ago

This update has been submitted for batched by nmav.

6 years ago

This update has been submitted for stable by nmav.

6 years ago

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

Builds

gnutls30-3.5.19-1.el6

BZ#1459797 CVE-2017-7507 gnutls30: gnutls: Crash upon receiving well-formed status_request extension [epel-6]

BZ#1619512 CVE-2018-10844 gnutls30: gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls [epel-all]

BZ#1619519 CVE-2018-10845 gnutls30: gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant [epel-all]

BZ#1619524 CVE-2018-10846 gnutls30: gnutls: "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery [epel-all]

gnutls30-3.5.19-1.el6

Automated Test Results

ignored