Oval Definition:oval:org.opensuse.security:def:74912
Revision Date:2020-12-01Version:1
Title:Security update for gnutls (Important)
Description:

This update for gnutls fixes the following issues:

- CVE-2020-13777: Fixed an insecure session ticket key construction which could have made the TLS server to not bind the session ticket encryption key with a value supplied by the application until the initial key rotation, allowing an attacker to bypass authentication in TLS 1.3 and recover previous conversations in TLS 1.2 (bsc#1172506). - Fixed an improper handling of certificate chain with cross-signed intermediate CA certificates (bsc#1172461).

This update was imported from the SUSE:SLE-15:Update update project.
Family:unixClass:patch
Status:Reference(s):1172461
1172506
1175475
CVE-2020-13777
CVE-2020-14352
openSUSE-SU-2020:0790-1
openSUSE-SU-2020:1289-1
Platform(s):openSUSE Leap 15.1
openSUSE Leap 15.2
Product(s):
Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • gnutls-3.6.7-lp151.2.18 is installed
  • OR gnutls-guile-3.6.7-lp151.2.18 is installed
  • OR libgnutls-dane-devel-3.6.7-lp151.2.18 is installed
  • OR libgnutls-dane0-3.6.7-lp151.2.18 is installed
  • OR libgnutls-devel-3.6.7-lp151.2.18 is installed
  • OR libgnutls-devel-32bit-3.6.7-lp151.2.18 is installed
  • OR libgnutls30-3.6.7-lp151.2.18 is installed
  • OR libgnutls30-32bit-3.6.7-lp151.2.18 is installed
  • OR libgnutls30-hmac-3.6.7-lp151.2.18 is installed
  • OR libgnutls30-hmac-32bit-3.6.7-lp151.2.18 is installed
  • OR libgnutlsxx-devel-3.6.7-lp151.2.18 is installed
  • OR libgnutlsxx28-3.6.7-lp151.2.18 is installed
  • Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • librepo-1.11.2-lp152.2.3 is installed
  • OR librepo-devel-1.11.2-lp152.2.3 is installed
  • OR librepo0-1.11.2-lp152.2.3 is installed
  • OR python3-librepo-1.11.2-lp152.2.3 is installed
  • BACK