Security update for gnutls
This update for gnutls fixes the following security issues: - GnuTLS could have crashed when processing maliciously crafted OpenPGP certificates (GNUTLS-SA-2017-2, bsc#1018832, CVE-2017-5335, CVE-2017-5337, CVE-2017-5336) - GnuTLS could have falsely accepted certificates when using OCSP (GNUTLS-SA-2016-3, bsc#999646, CVE-2016-7444) - GnuTLS could have suffered from 100% CPU load DoS attacks by using SSL alert packets during the handshake (bsc#1005879, CVE-2016-8610)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for gnutls fixes the following security issues: - GnuTLS could have crashed when processing maliciously crafted OpenPGP certificates (GNUTLS-SA-2017-2, bsc#1018832, CVE-2017-5335, CVE-2017-5337, CVE-2017-5336) - GnuTLS could have falsely accepted certificates when using OCSP (GNUTLS-SA-2016-3, bsc#999646, CVE-2016-7444) - GnuTLS could have suffered from 100% CPU load DoS attacks by using SSL alert packets during the handshake (bsc#1005879, CVE-2016-8610)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1005879
- https://bugzilla.suse.com/1018832
- https://bugzilla.suse.com/999646
- https://www.suse.com/security/cve/CVE-2016-7444
- https://www.suse.com/security/cve/CVE-2016-8610
- https://www.suse.com/security/cve/CVE-2017-5335
- https://www.suse.com/security/cve/CVE-2017-5336
- https://www.suse.com/security/cve/CVE-2017-5337
- https://www.suse.com/support/update/announcement/2017/suse-su-20170348-1/