Oval Definition:oval:org.opensuse.security:def:65121
Revision Date:2020-12-01Version:1
Title:Security update for gmp, gnutls, libnettle (Moderate)
Description:

This update for gmp, gnutls, libnettle fixes the following issues:

Security issue fixed:

- CVE-2020-11501: Fixed zero random value in DTLS client hello (bsc#1168345)

FIPS related bugfixes:

- FIPS: Install checksums for binary integrity verification which are required when running in FIPS mode (bsc#1152692, jsc#SLE-9518) - FIPS: Fixed a cfb8 decryption issue, no longer truncate output IV if input is shorter than block size. (bsc#1166881) - FIPS: Added Diffie Hellman public key verification test. (bsc#1155327)
Family:unixClass:patch
Status:Reference(s):1049092
1133035
1152692
1155327
1166881
1168345
CVE-2017-9814
CVE-2019-3902
CVE-2020-11501
openSUSE-SU-2020:0880-1
SUSE-SU-2020:0948-1
SUSE-SU-2020:1937-1
Platform(s):openSUSE Leap 15.2
SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
Product(s):
Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • mercurial-4.5.2-lp152.7.3 is installed
  • OR mercurial-lang-4.5.2-lp152.7.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • AND Package Information
  • gmp-6.1.2-4.3 is installed
  • OR gmp-devel-6.1.2-4.3 is installed
  • OR gnutls-3.6.7-6.14 is installed
  • OR libgmp10-6.1.2-4.3 is installed
  • OR libgmp10-32bit-6.1.2-4.3 is installed
  • OR libgmpxx4-6.1.2-4.3 is installed
  • OR libgnutls-devel-3.6.7-6.14 is installed
  • OR libgnutls30-3.6.7-6.14 is installed
  • OR libgnutls30-32bit-3.6.7-6.14 is installed
  • OR libgnutls30-hmac-3.6.7-6.14 is installed
  • OR libgnutls30-hmac-32bit-3.6.7-6.14 is installed
  • OR libgnutlsxx-devel-3.6.7-6.14 is installed
  • OR libgnutlsxx28-3.6.7-6.14 is installed
  • OR libhogweed4-3.4.1-4.12 is installed
  • OR libhogweed4-32bit-3.4.1-4.12 is installed
  • OR libnettle-3.4.1-4.12 is installed
  • OR libnettle-devel-3.4.1-4.12 is installed
  • OR libnettle6-3.4.1-4.12 is installed
  • OR libnettle6-32bit-3.4.1-4.12 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed
  • AND Package Information
  • cairo-1.16.0-4.8 is installed
  • OR libcairo2-32bit-1.16.0-4.8 is installed
  • BACK