shield Security update for gnutls

SUSE-SLE-Module-Desktop-Applications-15-2018-2070

This update for gnutls fixes the following security issues: - Improved mitigations against Lucky 13 class of attacks - CVE-2018-10846: "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery (bsc#1105460) - CVE-2018-10845: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant (bsc#1105459) - CVE-2018-10844: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls (bsc#1105437) - CVE-2017-10790: The _asn1_check_identifier function in Libtasn1 caused a NULL pointer dereference and crash (bsc#1047002)

• Release Date
  Sep 28 2018
• References
  Bugzilla: 1105437, 1105460, 1105459, 1047002
  CVEs: CVE-2017-10790, CVE-2018-10845, CVE-2018-10844, CVE-2018-10846
• Type
  security
• Severity
  moderate

cloud_download Downloads

Desktop Applications Module 15 x86_64

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.6.2-6.3.1 lock src

  libgnutls30-32bit
  The GNU Transport Layer Security Library

  3.6.2-6.3.1 lock rpm