Oval Definition:oval:org.opensuse.security:def:68468
Revision Date:2020-12-01Version:1
Title:Security update for gmp, gnutls, libnettle (Moderate)
Description:

This update for gmp, gnutls, libnettle fixes the following issues:

Security issue fixed:

- CVE-2020-11501: Fixed zero random value in DTLS client hello (bsc#1168345)

FIPS related bugfixes:

- FIPS: Install checksums for binary integrity verification which are required when running in FIPS mode (bsc#1152692, jsc#SLE-9518) - FIPS: Fixed a cfb8 decryption issue, no longer truncate output IV if input is shorter than block size. (bsc#1166881) - FIPS: Added Diffie Hellman public key verification test. (bsc#1155327)
Family:unixClass:patch
Status:Reference(s):1010979
1010980
1020451
1020456
1020458
1020460
1045450
1057152
1088278
1114498
1115637
1117328
1120805
1120807
1152692
1155327
1166881
1168345
CVE-2016-9398
CVE-2016-9399
CVE-2017-14132
CVE-2017-5499
CVE-2017-5503
CVE-2017-5504
CVE-2017-5505
CVE-2017-9782
CVE-2018-18873
CVE-2018-19139
CVE-2018-19543
CVE-2018-20570
CVE-2018-20622
CVE-2018-9252
CVE-2020-11501
SUSE-SU-2020:0948-1
SUSE-SU-2020:2689-1
Platform(s):SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • AND Package Information
  • gmp-6.1.2-4.3 is installed
  • OR gmp-devel-6.1.2-4.3 is installed
  • OR gnutls-3.6.7-6.14 is installed
  • OR libgmp10-6.1.2-4.3 is installed
  • OR libgmp10-32bit-6.1.2-4.3 is installed
  • OR libgmpxx4-6.1.2-4.3 is installed
  • OR libgnutls-devel-3.6.7-6.14 is installed
  • OR libgnutls30-3.6.7-6.14 is installed
  • OR libgnutls30-32bit-3.6.7-6.14 is installed
  • OR libgnutls30-hmac-3.6.7-6.14 is installed
  • OR libgnutls30-hmac-32bit-3.6.7-6.14 is installed
  • OR libgnutlsxx-devel-3.6.7-6.14 is installed
  • OR libgnutlsxx28-3.6.7-6.14 is installed
  • OR libhogweed4-3.4.1-4.12 is installed
  • OR libhogweed4-32bit-3.4.1-4.12 is installed
  • OR libnettle-3.4.1-4.12 is installed
  • OR libnettle-devel-3.4.1-4.12 is installed
  • OR libnettle6-3.4.1-4.12 is installed
  • OR libnettle6-32bit-3.4.1-4.12 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed
  • AND Package Information
  • jasper-2.0.14-3.16 is installed
  • OR libjasper-devel-2.0.14-3.16 is installed
  • BACK