Download
| Alert*
|
oval:org.secpod.oval:def:503387
The gnutls packages provide the GNU Transport Layer Security library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. The following packages have been upgraded to a later upstream version: gnutls . Security Fix: * gnutls: use-after-free/double-free in certificat ... oval:org.secpod.oval:def:66485 The gnutls packages provide the GNU Transport Layer Security library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. The following packages have been upgraded to a later upstream version: gnutls . Security Fix: * gnutls: use-after-free/double-free in certificat ... oval:org.secpod.oval:def:89050585 This update for gnutls fixes to version 3.6.7 the following issues: Security issued fixed: - CVE-2019-3836: Fixed an invalid pointer access via malformed TLS1.3 async messages . - CVE-2019-3829: Fixed a double free vulnerability in the certificate verification API . - CVE-2018-16868: Fixed Bleichenb ... oval:org.secpod.oval:def:116221 GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and other ... oval:org.secpod.oval:def:116185 GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and other ... oval:org.secpod.oval:def:2106265 Oracle Solaris 11 - ( CVE-2019-3829 ) oval:org.secpod.oval:def:1901741 invalid pointer access upon receiving async handshake messages oval:org.secpod.oval:def:1504260 [3.6.8-8] - Use fallback random function for RSA blinding in FIPS selftests [3.6.8-7] - Fix deterministic signature creation in selftests [3.6.8-6] - Treat login error more gracefully when enumerating PKCS#11 tokens - Use deterministic ECDSA/DSA in FIPS selftests - Add gnutls_aead_cipher_{encrypt, ... oval:org.secpod.oval:def:704976 gnutls28: GNU TLS library Several security issues were fixed in GnuTLS. |
