Re: gnutls 3.8.0
Andreas Metzler <[email protected]> Fri, 10 Feb 2023 15:04:44 +0100
| Newsgroups | gmane.network.gnutls.general |
|---|---|
| Message-ID | <Y+ZO/[email protected]> |
On 2023-02-10 Zoltan Fridrich <[email protected]> wrote: > Hello, > We have just released gnutls-3.8.0. This is a bug fix and enhancement > release on the 3.8.x branch. [...] > ** libgnutls: Fix a Bleichenbacher oracle in the TLS RSA key exchange. > Reported by Hubert Kario (#1050). Fix developed by Alexander Sosedkin. > [GNUTLS-SA-2020-07-14, CVSS: medium] [CVE-2023-0361] [...] Hello, thank you. I gather from ther bug report that this probably affects at least all supported versions, i.e. 3.6.x and 3.7.x (< 3.7.9) - Can you confirm? TIA, cu Andreas