Oval Definition:oval:org.opensuse.security:def:74806
Revision Date:2020-12-01Version:1
Title:Security update for gmp, gnutls, libnettle (Moderate)
Description:

This update for gmp, gnutls, libnettle fixes the following issues:

Security issue fixed:

- CVE-2020-11501: Fixed zero random value in DTLS client hello (bsc#1168345)

FIPS related bugfixes:

- FIPS: Install checksums for binary integrity verification which are required when running in FIPS mode (bsc#1152692, jsc#SLE-9518) - FIPS: Fixed a cfb8 decryption issue, no longer truncate output IV if input is shorter than block size. (bsc#1166881) - FIPS: Added Diffie Hellman public key verification test. (bsc#1155327)

This update was imported from the SUSE:SLE-15:Update update project.
Family:unixClass:patch
Status:Reference(s):1140709
1152692
1153095
1153259
1155327
1155784
1158696
1159692
1166881
1168345
CVE-2019-12838
CVE-2019-19727
CVE-2019-19728
CVE-2020-11501
openSUSE-SU-2020:0085-1
openSUSE-SU-2020:0501-1
Platform(s):openSUSE Leap 15.1
Product(s):
Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • gmp-6.1.2-lp151.4.3 is installed
  • OR gmp-devel-6.1.2-lp151.4.3 is installed
  • OR gmp-devel-32bit-6.1.2-lp151.4.3 is installed
  • OR gnutls-3.6.7-lp151.2.6 is installed
  • OR gnutls-guile-3.6.7-lp151.2.6 is installed
  • OR libgmp10-6.1.2-lp151.4.3 is installed
  • OR libgmp10-32bit-6.1.2-lp151.4.3 is installed
  • OR libgmpxx4-6.1.2-lp151.4.3 is installed
  • OR libgmpxx4-32bit-6.1.2-lp151.4.3 is installed
  • OR libgnutls-dane-devel-3.6.7-lp151.2.6 is installed
  • OR libgnutls-dane0-3.6.7-lp151.2.6 is installed
  • OR libgnutls-devel-3.6.7-lp151.2.6 is installed
  • OR libgnutls-devel-32bit-3.6.7-lp151.2.6 is installed
  • OR libgnutls30-3.6.7-lp151.2.6 is installed
  • OR libgnutls30-32bit-3.6.7-lp151.2.6 is installed
  • OR libgnutls30-hmac-3.6.7-lp151.2.6 is installed
  • OR libgnutls30-hmac-32bit-3.6.7-lp151.2.6 is installed
  • OR libgnutlsxx-devel-3.6.7-lp151.2.6 is installed
  • OR libgnutlsxx28-3.6.7-lp151.2.6 is installed
  • OR libhogweed4-3.4.1-lp151.2.3 is installed
  • OR libhogweed4-32bit-3.4.1-lp151.2.3 is installed
  • OR libnettle-3.4.1-lp151.2.3 is installed
  • OR libnettle-devel-3.4.1-lp151.2.3 is installed
  • OR libnettle-devel-32bit-3.4.1-lp151.2.3 is installed
  • OR libnettle6-3.4.1-lp151.2.3 is installed
  • OR libnettle6-32bit-3.4.1-lp151.2.3 is installed
  • OR nettle-3.4.1-lp151.2.3 is installed
  • BACK