A gnutls and nettle security update has been released for Alma Linux 8.3.
ALSA-2021:1206 Important: gnutls and nettle security update
Type:
security
Severity:
important
Release date:
2021-04-14
Description
Nettle is a cryptographic library that is designed to fit easily in almost any context: In crypto toolkits for object-oriented languages, such as C++, Python, or Pike, in applications like LSH or GNUPG, or even in kernel space.
Security Fix(es):
* nettle: Out of bounds memory access in signature verification (CVE-2021-20305)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
CVE-2021-20305
Updates packages:
gnutls-3.6.14-8.el8_3.i686.rpm
gnutls-3.6.14-8.el8_3.x86_64.rpm
gnutls-c++-3.6.14-8.el8_3.i686.rpm
gnutls-c++-3.6.14-8.el8_3.x86_64.rpm
gnutls-dane-3.6.14-8.el8_3.i686.rpm
gnutls-dane-3.6.14-8.el8_3.x86_64.rpm
gnutls-devel-3.6.14-8.el8_3.i686.rpm
gnutls-devel-3.6.14-8.el8_3.x86_64.rpm
gnutls-utils-3.6.14-8.el8_3.x86_64.rpm
nettle-3.4.1-4.el8_3.i686.rpm
nettle-3.4.1-4.el8_3.x86_64.rpm
nettle-devel-3.4.1-4.el8_3.i686.rpm
nettle-devel-3.4.1-4.el8_3.x86_64.rpm
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.
