shield Recommended update for gnutls

SUSE-SLE-Module-Basesystem-15-SP6-2024-3846

This update for gnutls fixes the following issues: - FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669] - FIPS: Allow to perform the integrity check with the hmac provided by each library [bsc#1226724] - FIPS: Mark gnutls_hash_fast operations as approved in SLI. [bsc#1230166] - FIPS: Run pairwise consistency test only in FIPS mode. [bsc#1226733] - FIPS: Use full hash+sign operations, not low level primitives in PCT test. [bsc#1226733] - FIPS: Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer. [bsc#1227642] - FIPS: Allow RSA signature verification with min of 2048 bit modulus. [bsc#1227670] - FIPS: Remove not needed DSA in selfchecks in FIPS mode. [bsc#1227671, bsc#1226731]

• Release Date
  Oct 31 2024
• References
  Bugzilla: 1226724, 1227642, 1230166, 1226731, 1226733, 1227670, 1227671, 1227669
  
• Type
  recommended
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.6 ppc64le

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.8.3-150600.4.3.1 lock rpm lock src

  libgnutls-devel
  Development package for the GnuTLS C API

  3.8.3-150600.4.3.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.8.3-150600.4.3.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.8.3-150600.4.3.1 lock rpm

  libgnutlsxx30
  C++ API for the GNU Transport Layer Security Library

  3.8.3-150600.4.3.1 lock rpm

Basesystem Module 15.6 s390x

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.8.3-150600.4.3.1 lock rpm lock src

  libgnutls-devel
  Development package for the GnuTLS C API

  3.8.3-150600.4.3.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.8.3-150600.4.3.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.8.3-150600.4.3.1 lock rpm

  libgnutlsxx30
  C++ API for the GNU Transport Layer Security Library

  3.8.3-150600.4.3.1 lock rpm

Basesystem Module 15.6 aarch64

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.8.3-150600.4.3.1 lock rpm lock src

  libgnutls-devel
  Development package for the GnuTLS C API

  3.8.3-150600.4.3.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.8.3-150600.4.3.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.8.3-150600.4.3.1 lock rpm

  libgnutlsxx30
  C++ API for the GNU Transport Layer Security Library

  3.8.3-150600.4.3.1 lock rpm

Basesystem Module 15.6 x86_64

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.8.3-150600.4.3.1 lock rpm lock src

  libgnutls-devel
  Development package for the GnuTLS C API

  3.8.3-150600.4.3.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.8.3-150600.4.3.1 lock rpm

  libgnutls30-32bit
  The GNU Transport Layer Security Library

  3.8.3-150600.4.3.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.8.3-150600.4.3.1 lock rpm

  libgnutlsxx30
  C++ API for the GNU Transport Layer Security Library

  3.8.3-150600.4.3.1 lock rpm