Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE: 2020:2864-1 Moderate: gnutls Buffer Overflow and FIPS Fixes

suse
Calendar Grey October 6, 2020
Dist Suse Esm H88
SUSE has released a significant security patch for gnutls targeting moderate-severity vulnerabilities. Discover further details here.
An update that solves one vulnerability and has two fixes is now available

Summary

This update for gnutls fixes the following issues: - Fix heap buffer overflow in handshake with no_renegotiation alert sent (CVE-2020-24659 bsc#1176181) - FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086) - FIPS: Use 2048 bit prime in DH selftest (bsc#1176086) - FIPS: Add TLS KDF selftest (bsc#1176671) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Basesystem 15-SP2: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP2-2020-2864=1 Package List: - SUSE Linux Enterprise Module for Basesystem 15-SP2 (aarch64 ppc64le s390x x86_64): gnutls-3.6.7-14.4.1 gnutls-debuginfo-3.6.7-14.4.1

Topics%20covered

Topics Covered

security advisory moderate buffer overflow SUSE gnutls FIPS handshake issue

References

#1176086 #1176181 #1176671

Cross- CVE-2020-24659

Affected Products:

SUSE Linux Enterprise Module for Basesystem 15-SP2

https://www.suse.com/security/cve/CVE-2020-24659.html

https://bugzilla.suse.com/1176086

https://bugzilla.suse.com/1176181

https://bugzilla.suse.com/1176671

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2020:2864-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate buffer overflow SUSE gnutls FIPS handshake issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here