shield Security update for gnutls

SUSE-SLE-SDK-12-SP3-2018-1990

This update for gnutls fixes the following issues: Security issues fixed: - Improved mitigations against Lucky 13 class of attacks - "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery (CVE-2018-10846, bsc#1105460) - HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant (CVE-2018-10845, bsc#1105459) - HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls (CVE-2018-10844, bsc#1105437) - The _asn1_check_identifier function in Libtasn1 caused a NULL pointer dereference and crash (CVE-2017-10790, bsc#1047002)

• Release Date
  Sep 24 2018
• References
  Bugzilla: 1105437, 1105460, 1105459, 1047002
  CVEs: CVE-2018-10845, CVE-2018-10844, CVE-2017-10790, CVE-2018-10846
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.3 aarch64

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.3.27-3.3.1 lock src

  libgnutls-devel
  Development package for gnutls

  3.3.27-3.3.1 lock rpm

  libgnutls-openssl-devel
  Development package for gnutls

  3.3.27-3.3.1 lock rpm

  libgnutlsxx-devel
  Development package for gnutls

  3.3.27-3.3.1 lock rpm

  libgnutlsxx28
  The GNU Transport Layer Security Library

  3.3.27-3.3.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 ppc64le

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.3.27-3.3.1 lock src

  libgnutls-devel
  Development package for gnutls

  3.3.27-3.3.1 lock rpm

  libgnutls-openssl-devel
  Development package for gnutls

  3.3.27-3.3.1 lock rpm

  libgnutlsxx-devel
  Development package for gnutls

  3.3.27-3.3.1 lock rpm

  libgnutlsxx28
  The GNU Transport Layer Security Library

  3.3.27-3.3.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 s390x

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.3.27-3.3.1 lock src

  libgnutls-devel
  Development package for gnutls

  3.3.27-3.3.1 lock rpm

  libgnutls-openssl-devel
  Development package for gnutls

  3.3.27-3.3.1 lock rpm

  libgnutlsxx-devel
  Development package for gnutls

  3.3.27-3.3.1 lock rpm

  libgnutlsxx28
  The GNU Transport Layer Security Library

  3.3.27-3.3.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 x86_64

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.3.27-3.3.1 lock src

  libgnutls-devel
  Development package for gnutls

  3.3.27-3.3.1 lock rpm

  libgnutls-openssl-devel
  Development package for gnutls

  3.3.27-3.3.1 lock rpm

  libgnutlsxx-devel
  Development package for gnutls

  3.3.27-3.3.1 lock rpm

  libgnutlsxx28
  The GNU Transport Layer Security Library

  3.3.27-3.3.1 lock rpm