Oval Definition:oval:org.opensuse.security:def:64974
Revision Date:2020-12-01Version:1
Title:Security update for gnutls (Important)
Description:

This update for gnutls fixes the following issues:

- CVE-2020-13777: Fixed an insecure session ticket key construction which could have made the TLS server to not bind the session ticket encryption key with a value supplied by the application until the initial key rotation, allowing an attacker to bypass authentication in TLS 1.3 and recover previous conversations in TLS 1.2 (bsc#1172506). - Fixed an improper handling of certificate chain with cross-signed intermediate CA certificates (bsc#1172461).
Family:unixClass:patch
Status:Reference(s):1172461
1172506
1175857
1177895
1178588
CVE-2020-13777
CVE-2020-24654
CVE-2020-26950
CVE-2020-27153
openSUSE-SU-2020:1310-2
SUSE-SU-2020:1584-1
SUSE-SU-2020:3165-1
Platform(s):openSUSE Leap 15.2
SUSE Linux Enterprise Module for Basesystem 15 SP1
Product(s):
Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • ark-20.04.2-lp152.2.6 is installed
  • OR ark-lang-20.04.2-lp152.2.6 is installed
  • OR libkerfuffle18-18.12.3-lp151.2.7 is installed
  • OR libkerfuffle20-20.04.2-lp152.2.6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • AND Package Information
  • gnutls-3.6.7-6.29 is installed
  • OR libgnutls-devel-3.6.7-6.29 is installed
  • OR libgnutls30-3.6.7-6.29 is installed
  • OR libgnutls30-32bit-3.6.7-6.29 is installed
  • OR libgnutls30-hmac-3.6.7-6.29 is installed
  • OR libgnutls30-hmac-32bit-3.6.7-6.29 is installed
  • OR libgnutlsxx-devel-3.6.7-6.29 is installed
  • OR libgnutlsxx28-3.6.7-6.29 is installed
  • BACK