VDB
SUSE-SU-2023%3A0475-1
SUSE-SU-2023%3A0475-1
PUBLISHED
CVSS 5.900000095367432 MEDIUM
This update for gnutls fixes the following issues: - CVE-2023-0361: Fixed a Bleichenbacher oracle in the TLS RSA key exchange (bsc#1208143). - FIPS: Make the jitterentropy calls thread-safe (bsc#1208146). - FIPS: GnuTLS DH/ECDH PCT public key regeneration (bsc#1207183).
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| libgnutlsxx28 | ||
| libgnutls | ||
| libgnutls30 | ||
| gnutls | ||
| libgnutlsxx |
Timeline
- Feb 22, 2023 CVE Published
References
- https://www.suse.com/support/security/rating/ url
- https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_0475-1.json advisory
- https://www.suse.com/support/update/announcement/2023/suse-su-20230475-1/ advisory
- https://lists.suse.com/pipermail/sle-security-updates/2023-February/013868.html advisory
- https://bugzilla.suse.com/1207183 advisory
- https://bugzilla.suse.com/1208143 advisory
- https://bugzilla.suse.com/1208146 advisory
- https://www.suse.com/security/cve/CVE-2023-0361/ advisory