SUSE-SU-2017:1886-1

Details

Description of the patch:

This update for gnutls fixes the following issues:

GNUTLS-SA-2017-3 / CVE-2017-7869: An out-of-bounds write in OpenPGP certificate decoding was fixed (bsc#1034173)
CVE-2017-6891: A potential stack buffer overflow in the bundled libtasn1 was fixed (bsc#1040621)
An address read of 4 bytes past the end of buffer in OpenPGP certificate parsing was fixed (bsc#1038337)

Affected Packages

libgnutls-devel

SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

2.4.1-24.39.70.1

libgnutls-extra-devel

SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

2.4.1-24.39.70.1

libgnutls-extra26

SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise High Availability Extension 11 SP4SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

2.4.1-24.39.70.1

References

ADVISORY

https://bugzilla.suse.com/1034173

ADVISORY

https://bugzilla.suse.com/1038337

ADVISORY

https://bugzilla.suse.com/1040621

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2017-July/003036.html

ADVISORY

https://www.suse.com/security/cve/CVE-2017-6891/

ADVISORY

https://www.suse.com/security/cve/CVE-2017-7869/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2017/suse-su-20171886-1/