gpp_maybe Security update for gnutls

SUSE-SLE-Module-Basesystem-15-SP1-2020-1584

This update for gnutls fixes the following issues: - CVE-2020-13777: Fixed an insecure session ticket key construction which could have made the TLS server to not bind the session ticket encryption key with a value supplied by the application until the initial key rotation, allowing an attacker to bypass authentication in TLS 1.3 and recover previous conversations in TLS 1.2 (bsc#1172506). - Fixed an improper handling of certificate chain with cross-signed intermediate CA certificates (bsc#1172461).

• Release Date
  Jun 9 2020
• References
  Bugzilla: 1172506, 1172461
  CVEs: CVE-2020-13777
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.1 ppc64le

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.6.7-6.29.1 lock rpm lock src

  libgnutls-devel
  Development package for the GnuTLS C API

  3.6.7-6.29.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.6.7-6.29.1 lock rpm

  libgnutls30-hmac
  Checksums of the GNU Transport Layer Security Library

  3.6.7-6.29.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.6.7-6.29.1 lock rpm

  libgnutlsxx28
  C++ API for the GNU Transport Layer Security Library

  3.6.7-6.29.1 lock rpm

Basesystem Module 15.1 aarch64

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.6.7-6.29.1 lock rpm lock src

  libgnutls-devel
  Development package for the GnuTLS C API

  3.6.7-6.29.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.6.7-6.29.1 lock rpm

  libgnutls30-hmac
  Checksums of the GNU Transport Layer Security Library

  3.6.7-6.29.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.6.7-6.29.1 lock rpm

  libgnutlsxx28
  C++ API for the GNU Transport Layer Security Library

  3.6.7-6.29.1 lock rpm

Basesystem Module 15.1 s390x

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.6.7-6.29.1 lock rpm lock src

  libgnutls-devel
  Development package for the GnuTLS C API

  3.6.7-6.29.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.6.7-6.29.1 lock rpm

  libgnutls30-hmac
  Checksums of the GNU Transport Layer Security Library

  3.6.7-6.29.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.6.7-6.29.1 lock rpm

  libgnutlsxx28
  C++ API for the GNU Transport Layer Security Library

  3.6.7-6.29.1 lock rpm

Basesystem Module 15.1 x86_64

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.6.7-6.29.1 lock rpm lock src

  libgnutls-devel
  Development package for the GnuTLS C API

  3.6.7-6.29.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.6.7-6.29.1 lock rpm

  libgnutls30-32bit
  The GNU Transport Layer Security Library

  3.6.7-6.29.1 lock rpm

  libgnutls30-hmac
  Checksums of the GNU Transport Layer Security Library

  3.6.7-6.29.1 lock rpm

  libgnutls30-hmac-32bit
  Checksums of the GNU Transport Layer Security Library

  3.6.7-6.29.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.6.7-6.29.1 lock rpm

  libgnutlsxx28
  C++ API for the GNU Transport Layer Security Library

  3.6.7-6.29.1 lock rpm