Oval Definition:oval:org.opensuse.security:def:65797
Revision Date:2020-12-01Version:1
Title:Security update for gmp, gnutls, libnettle (Moderate)
Description:

This update for gmp, gnutls, libnettle fixes the following issues:

Security issue fixed:

- CVE-2020-11501: Fixed zero random value in DTLS client hello (bsc#1168345)

FIPS related bugfixes:

- FIPS: Install checksums for binary integrity verification which are required when running in FIPS mode (bsc#1152692, jsc#SLE-9518) - FIPS: Fixed a cfb8 decryption issue, no longer truncate output IV if input is shorter than block size. (bsc#1166881) - FIPS: Added Diffie Hellman public key verification test. (bsc#1155327)
Family:unixClass:patch
Status:Reference(s):1152692
1153108
1155327
1156321
1166881
1168345
CVE-2019-10220
CVE-2019-13272
CVE-2020-11501
SUSE-SU-2019:3248-1
SUSE-SU-2020:0948-1
Platform(s):SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-195-default-8-22 is installed
  • OR kernel-livepatch-SLE15-SP1_Update_0-8-22 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
  • AND Package Information
  • gnutls-3.6.7-6.14 is installed
  • OR gnutls-guile-3.6.7-6.14 is installed
  • OR libgnutls-devel-32bit-3.6.7-6.14 is installed
  • OR libnettle-3.4.1-4.12 is installed
  • OR libnettle-devel-32bit-3.4.1-4.12 is installed
  • OR nettle-3.4.1-4.12 is installed
  • BACK