OPENSUSE-SU-2024:10801-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2026-09-20 20:05Summary
gnutls-3.7.2-1.2 on GA media
Severity
Moderate
Notes
Title of the patch: gnutls-3.7.2-1.2 on GA media
Description of the patch: These are all security issues fixed in the gnutls-3.7.2-1.2 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2024-10801
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
44 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
44 products, the same list as for
CVE-2006-4790
Threats
Impact
important
Affected products
Recommended
44 products, the same list as for
CVE-2006-4790
Threats
Impact
critical
Affected products
Recommended
44 products, the same list as for
CVE-2006-4790
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
44 products, the same list as for
CVE-2006-4790
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
44 products, the same list as for
CVE-2006-4790
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
44 products, the same list as for
CVE-2006-4790
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
44 products, the same list as for
CVE-2006-4790
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
44 products, the same list as for
CVE-2006-4790
Threats
Impact
moderate
7.4 (High)
Affected products
Recommended
44 products, the same list as for
CVE-2006-4790
Threats
Impact
important
7.4 (High)
Affected products
Recommended
44 products, the same list as for
CVE-2006-4790
Threats
Impact
important
References
49 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "gnutls-3.7.2-1.2 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the gnutls-3.7.2-1.2 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10801",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10801-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2006-4790 page",
"url": "https://www.suse.com/security/cve/CVE-2006-4790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-1948 page",
"url": "https://www.suse.com/security/cve/CVE-2008-1948/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-1949 page",
"url": "https://www.suse.com/security/cve/CVE-2008-1949/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-1950 page",
"url": "https://www.suse.com/security/cve/CVE-2008-1950/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-8610 page",
"url": "https://www.suse.com/security/cve/CVE-2016-8610/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7869 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7869/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-10846 page",
"url": "https://www.suse.com/security/cve/CVE-2018-10846/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-3829 page",
"url": "https://www.suse.com/security/cve/CVE-2019-3829/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-3836 page",
"url": "https://www.suse.com/security/cve/CVE-2019-3836/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-13777 page",
"url": "https://www.suse.com/security/cve/CVE-2020-13777/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-20232 page",
"url": "https://www.suse.com/security/cve/CVE-2021-20232/"
}
],
"title": "gnutls-3.7.2-1.2 on GA media",
"tracking": {
"current_release_date": "2026-09-20T20:05:50Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10801-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T20:05:50Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "gnutls-0:3.7.2-1.2.aarch64",
"product": {
"name": "gnutls-0:3.7.2-1.2.aarch64",
"product_id": "gnutls-0:3.7.2-1.2.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gnutls@3.7.2-1.2?arch=aarch64\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "gnutls-guile-0:3.7.2-1.2.aarch64",
"product": {
"name": "gnutls-guile-0:3.7.2-1.2.aarch64",
"product_id": "gnutls-guile-0:3.7.2-1.2.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gnutls-guile@3.7.2-1.2?arch=aarch64\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"product": {
"name": "libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"product_id": "libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libgnutls-dane-devel@3.7.2-1.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libgnutls-dane0-0:3.7.2-1.2.aarch64",
"product": {
"name": "libgnutls-dane0-0:3.7.2-1.2.aarch64",
"product_id": "libgnutls-dane0-0:3.7.2-1.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libgnutls-dane0@3.7.2-1.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libgnutls-devel-0:3.7.2-1.2.aarch64",
"product": {
"name": "libgnutls-devel-0:3.7.2-1.2.aarch64",
"product_id": "libgnutls-devel-0:3.7.2-1.2.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls-devel@3.7.2-1.2?arch=aarch64\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"product": {
"name": "libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"product_id": "libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls-devel-32bit@3.7.2-1.2?arch=aarch64\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls30-0:3.7.2-1.2.aarch64",
"product": {
"name": "libgnutls30-0:3.7.2-1.2.aarch64",
"product_id": "libgnutls30-0:3.7.2-1.2.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls30@3.7.2-1.2?arch=aarch64\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"product": {
"name": "libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"product_id": "libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls30-32bit@3.7.2-1.2?arch=aarch64\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"product": {
"name": "libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"product_id": "libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls30-hmac@3.7.2-1.2?arch=aarch64\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"product": {
"name": "libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"product_id": "libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutlsxx-devel@3.7.2-1.2?arch=aarch64\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutlsxx28-0:3.7.2-1.2.aarch64",
"product": {
"name": "libgnutlsxx28-0:3.7.2-1.2.aarch64",
"product_id": "libgnutlsxx28-0:3.7.2-1.2.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutlsxx28@3.7.2-1.2?arch=aarch64\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-0:3.7.2-1.2.ppc64le",
"product": {
"name": "gnutls-0:3.7.2-1.2.ppc64le",
"product_id": "gnutls-0:3.7.2-1.2.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gnutls@3.7.2-1.2?arch=ppc64le\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "gnutls-guile-0:3.7.2-1.2.ppc64le",
"product": {
"name": "gnutls-guile-0:3.7.2-1.2.ppc64le",
"product_id": "gnutls-guile-0:3.7.2-1.2.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gnutls-guile@3.7.2-1.2?arch=ppc64le\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"product": {
"name": "libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"product_id": "libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libgnutls-dane-devel@3.7.2-1.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"product": {
"name": "libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"product_id": "libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libgnutls-dane0@3.7.2-1.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libgnutls-devel-0:3.7.2-1.2.ppc64le",
"product": {
"name": "libgnutls-devel-0:3.7.2-1.2.ppc64le",
"product_id": "libgnutls-devel-0:3.7.2-1.2.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls-devel@3.7.2-1.2?arch=ppc64le\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"product": {
"name": "libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"product_id": "libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls-devel-32bit@3.7.2-1.2?arch=ppc64le\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls30-0:3.7.2-1.2.ppc64le",
"product": {
"name": "libgnutls30-0:3.7.2-1.2.ppc64le",
"product_id": "libgnutls30-0:3.7.2-1.2.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls30@3.7.2-1.2?arch=ppc64le\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"product": {
"name": "libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"product_id": "libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls30-32bit@3.7.2-1.2?arch=ppc64le\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"product": {
"name": "libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"product_id": "libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls30-hmac@3.7.2-1.2?arch=ppc64le\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"product": {
"name": "libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"product_id": "libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutlsxx-devel@3.7.2-1.2?arch=ppc64le\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"product": {
"name": "libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"product_id": "libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutlsxx28@3.7.2-1.2?arch=ppc64le\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-0:3.7.2-1.2.s390x",
"product": {
"name": "gnutls-0:3.7.2-1.2.s390x",
"product_id": "gnutls-0:3.7.2-1.2.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gnutls@3.7.2-1.2?arch=s390x\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "gnutls-guile-0:3.7.2-1.2.s390x",
"product": {
"name": "gnutls-guile-0:3.7.2-1.2.s390x",
"product_id": "gnutls-guile-0:3.7.2-1.2.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gnutls-guile@3.7.2-1.2?arch=s390x\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"product": {
"name": "libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"product_id": "libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libgnutls-dane-devel@3.7.2-1.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libgnutls-dane0-0:3.7.2-1.2.s390x",
"product": {
"name": "libgnutls-dane0-0:3.7.2-1.2.s390x",
"product_id": "libgnutls-dane0-0:3.7.2-1.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libgnutls-dane0@3.7.2-1.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libgnutls-devel-0:3.7.2-1.2.s390x",
"product": {
"name": "libgnutls-devel-0:3.7.2-1.2.s390x",
"product_id": "libgnutls-devel-0:3.7.2-1.2.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls-devel@3.7.2-1.2?arch=s390x\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"product": {
"name": "libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"product_id": "libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls-devel-32bit@3.7.2-1.2?arch=s390x\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls30-0:3.7.2-1.2.s390x",
"product": {
"name": "libgnutls30-0:3.7.2-1.2.s390x",
"product_id": "libgnutls30-0:3.7.2-1.2.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls30@3.7.2-1.2?arch=s390x\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls30-32bit-0:3.7.2-1.2.s390x",
"product": {
"name": "libgnutls30-32bit-0:3.7.2-1.2.s390x",
"product_id": "libgnutls30-32bit-0:3.7.2-1.2.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls30-32bit@3.7.2-1.2?arch=s390x\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls30-hmac-0:3.7.2-1.2.s390x",
"product": {
"name": "libgnutls30-hmac-0:3.7.2-1.2.s390x",
"product_id": "libgnutls30-hmac-0:3.7.2-1.2.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls30-hmac@3.7.2-1.2?arch=s390x\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"product": {
"name": "libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"product_id": "libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutlsxx-devel@3.7.2-1.2?arch=s390x\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutlsxx28-0:3.7.2-1.2.s390x",
"product": {
"name": "libgnutlsxx28-0:3.7.2-1.2.s390x",
"product_id": "libgnutlsxx28-0:3.7.2-1.2.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutlsxx28@3.7.2-1.2?arch=s390x\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-0:3.7.2-1.2.x86_64",
"product": {
"name": "gnutls-0:3.7.2-1.2.x86_64",
"product_id": "gnutls-0:3.7.2-1.2.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gnutls@3.7.2-1.2?arch=x86_64\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "gnutls-guile-0:3.7.2-1.2.x86_64",
"product": {
"name": "gnutls-guile-0:3.7.2-1.2.x86_64",
"product_id": "gnutls-guile-0:3.7.2-1.2.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gnutls-guile@3.7.2-1.2?arch=x86_64\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"product": {
"name": "libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"product_id": "libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libgnutls-dane-devel@3.7.2-1.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libgnutls-dane0-0:3.7.2-1.2.x86_64",
"product": {
"name": "libgnutls-dane0-0:3.7.2-1.2.x86_64",
"product_id": "libgnutls-dane0-0:3.7.2-1.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libgnutls-dane0@3.7.2-1.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libgnutls-devel-0:3.7.2-1.2.x86_64",
"product": {
"name": "libgnutls-devel-0:3.7.2-1.2.x86_64",
"product_id": "libgnutls-devel-0:3.7.2-1.2.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls-devel@3.7.2-1.2?arch=x86_64\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"product": {
"name": "libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"product_id": "libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls-devel-32bit@3.7.2-1.2?arch=x86_64\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls30-0:3.7.2-1.2.x86_64",
"product": {
"name": "libgnutls30-0:3.7.2-1.2.x86_64",
"product_id": "libgnutls30-0:3.7.2-1.2.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls30@3.7.2-1.2?arch=x86_64\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"product": {
"name": "libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"product_id": "libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls30-32bit@3.7.2-1.2?arch=x86_64\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"product": {
"name": "libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"product_id": "libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutls30-hmac@3.7.2-1.2?arch=x86_64\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"product": {
"name": "libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"product_id": "libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutlsxx-devel@3.7.2-1.2?arch=x86_64\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libgnutlsxx28-0:3.7.2-1.2.x86_64",
"product": {
"name": "libgnutlsxx28-0:3.7.2-1.2.x86_64",
"product_id": "libgnutlsxx28-0:3.7.2-1.2.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:gnutls:3.7.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libgnutlsxx28@3.7.2-1.2?arch=x86_64\u0026upstream=gnutls-0:3.7.2-1.2.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64"
},
"product_reference": "gnutls-0:3.7.2-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le"
},
"product_reference": "gnutls-0:3.7.2-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x"
},
"product_reference": "gnutls-0:3.7.2-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64"
},
"product_reference": "gnutls-0:3.7.2-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-guile-0:3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64"
},
"product_reference": "gnutls-guile-0:3.7.2-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-guile-0:3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le"
},
"product_reference": "gnutls-guile-0:3.7.2-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-guile-0:3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x"
},
"product_reference": "gnutls-guile-0:3.7.2-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-guile-0:3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64"
},
"product_reference": "gnutls-guile-0:3.7.2-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls-dane-devel-0:3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64"
},
"product_reference": "libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls-dane-devel-0:3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le"
},
"product_reference": "libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls-dane-devel-0:3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x"
},
"product_reference": "libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls-dane-devel-0:3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64"
},
"product_reference": "libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls-dane0-0:3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64"
},
"product_reference": "libgnutls-dane0-0:3.7.2-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls-dane0-0:3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le"
},
"product_reference": "libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls-dane0-0:3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x"
},
"product_reference": "libgnutls-dane0-0:3.7.2-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls-dane0-0:3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64"
},
"product_reference": "libgnutls-dane0-0:3.7.2-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls-devel-0:3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64"
},
"product_reference": "libgnutls-devel-0:3.7.2-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls-devel-0:3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le"
},
"product_reference": "libgnutls-devel-0:3.7.2-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls-devel-0:3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x"
},
"product_reference": "libgnutls-devel-0:3.7.2-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls-devel-0:3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64"
},
"product_reference": "libgnutls-devel-0:3.7.2-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls-devel-32bit-0:3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64"
},
"product_reference": "libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le"
},
"product_reference": "libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls-devel-32bit-0:3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x"
},
"product_reference": "libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls-devel-32bit-0:3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64"
},
"product_reference": "libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls30-0:3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64"
},
"product_reference": "libgnutls30-0:3.7.2-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls30-0:3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le"
},
"product_reference": "libgnutls30-0:3.7.2-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls30-0:3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x"
},
"product_reference": "libgnutls30-0:3.7.2-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls30-0:3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64"
},
"product_reference": "libgnutls30-0:3.7.2-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls30-32bit-0:3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64"
},
"product_reference": "libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls30-32bit-0:3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le"
},
"product_reference": "libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls30-32bit-0:3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x"
},
"product_reference": "libgnutls30-32bit-0:3.7.2-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls30-32bit-0:3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64"
},
"product_reference": "libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls30-hmac-0:3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64"
},
"product_reference": "libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls30-hmac-0:3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le"
},
"product_reference": "libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls30-hmac-0:3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x"
},
"product_reference": "libgnutls30-hmac-0:3.7.2-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutls30-hmac-0:3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64"
},
"product_reference": "libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutlsxx-devel-0:3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64"
},
"product_reference": "libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutlsxx-devel-0:3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le"
},
"product_reference": "libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutlsxx-devel-0:3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x"
},
"product_reference": "libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutlsxx-devel-0:3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64"
},
"product_reference": "libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutlsxx28-0:3.7.2-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64"
},
"product_reference": "libgnutlsxx28-0:3.7.2-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutlsxx28-0:3.7.2-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le"
},
"product_reference": "libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutlsxx28-0:3.7.2-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x"
},
"product_reference": "libgnutlsxx28-0:3.7.2-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgnutlsxx28-0:3.7.2-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
},
"product_reference": "libgnutlsxx28-0:3.7.2-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-4790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2006-4790"
}
],
"notes": [
{
"category": "general",
"text": "verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from correctly verifying X.509 and other certificates that use PKCS, a variant of CVE-2006-4339.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2006-4790",
"url": "https://www.suse.com/security/cve/CVE-2006-4790"
},
{
"category": "external",
"summary": "SUSE Bug 1107874 for CVE-2006-4790",
"url": "https://bugzilla.suse.com/1107874"
},
{
"category": "external",
"summary": "SUSE Bug 206636 for CVE-2006-4790",
"url": "https://bugzilla.suse.com/206636"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2006-4790"
},
{
"cve": "CVE-2008-1948",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-1948"
}
],
"notes": [
{
"category": "general",
"text": "The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in a TLS 1.0 Client Hello message during extension handling, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a zero value for the length of Server Names, which leads to a buffer overflow in session resumption data in the pack_security_parameters function, aka GNUTLS-SA-2008-1-1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-1948",
"url": "https://www.suse.com/security/cve/CVE-2008-1948"
},
{
"category": "external",
"summary": "SUSE Bug 392947 for CVE-2008-1948",
"url": "https://bugzilla.suse.com/392947"
},
{
"category": "external",
"summary": "SUSE Bug 670152 for CVE-2008-1948",
"url": "https://bugzilla.suse.com/670152"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-1948"
},
{
"cve": "CVE-2008-1949",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-1949"
}
],
"notes": [
{
"category": "general",
"text": "The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service (NULL dereference and crash) via a TLS message containing multiple Client Hello messages, aka GNUTLS-SA-2008-1-2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-1949",
"url": "https://www.suse.com/security/cve/CVE-2008-1949"
},
{
"category": "external",
"summary": "SUSE Bug 392947 for CVE-2008-1949",
"url": "https://bugzilla.suse.com/392947"
},
{
"category": "external",
"summary": "SUSE Bug 670152 for CVE-2008-1949",
"url": "https://bugzilla.suse.com/670152"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2008-1949"
},
{
"cve": "CVE-2008-1950",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-1950"
}
],
"notes": [
{
"category": "general",
"text": "Integer signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of service (buffer over-read and crash) via a certain integer value in the Random field in an encrypted Client Hello message within a TLS record with an invalid Record Length, which leads to an invalid cipher padding length, aka GNUTLS-SA-2008-1-3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-1950",
"url": "https://www.suse.com/security/cve/CVE-2008-1950"
},
{
"category": "external",
"summary": "SUSE Bug 392947 for CVE-2008-1950",
"url": "https://bugzilla.suse.com/392947"
},
{
"category": "external",
"summary": "SUSE Bug 670152 for CVE-2008-1950",
"url": "https://bugzilla.suse.com/670152"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2008-1950"
},
{
"cve": "CVE-2016-8610",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-8610"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-8610",
"url": "https://www.suse.com/security/cve/CVE-2016-8610"
},
{
"category": "external",
"summary": "SUSE Bug 1005878 for CVE-2016-8610",
"url": "https://bugzilla.suse.com/1005878"
},
{
"category": "external",
"summary": "SUSE Bug 1005879 for CVE-2016-8610",
"url": "https://bugzilla.suse.com/1005879"
},
{
"category": "external",
"summary": "SUSE Bug 1110018 for CVE-2016-8610",
"url": "https://bugzilla.suse.com/1110018"
},
{
"category": "external",
"summary": "SUSE Bug 1120592 for CVE-2016-8610",
"url": "https://bugzilla.suse.com/1120592"
},
{
"category": "external",
"summary": "SUSE Bug 1126909 for CVE-2016-8610",
"url": "https://bugzilla.suse.com/1126909"
},
{
"category": "external",
"summary": "SUSE Bug 1148697 for CVE-2016-8610",
"url": "https://bugzilla.suse.com/1148697"
},
{
"category": "external",
"summary": "SUSE Bug 982575 for CVE-2016-8610",
"url": "https://bugzilla.suse.com/982575"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-8610"
},
{
"cve": "CVE-2017-7869",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7869"
}
],
"notes": [
{
"category": "general",
"text": "GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor\u0027s GNUTLS-SA-2017-3 report) is fixed in 3.5.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7869",
"url": "https://www.suse.com/security/cve/CVE-2017-7869"
},
{
"category": "external",
"summary": "SUSE Bug 1034173 for CVE-2017-7869",
"url": "https://bugzilla.suse.com/1034173"
},
{
"category": "external",
"summary": "SUSE Bug 1038337 for CVE-2017-7869",
"url": "https://bugzilla.suse.com/1038337"
},
{
"category": "external",
"summary": "SUSE Bug 1049210 for CVE-2017-7869",
"url": "https://bugzilla.suse.com/1049210"
},
{
"category": "external",
"summary": "SUSE Bug 1149679 for CVE-2017-7869",
"url": "https://bugzilla.suse.com/1149679"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-7869"
},
{
"cve": "CVE-2018-10846",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-10846"
}
],
"notes": [
{
"category": "general",
"text": "A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker could use a combination of \"Just in Time\" Prime+probe attack in combination with Lucky-13 attack to recover plain text using crafted packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-10846",
"url": "https://www.suse.com/security/cve/CVE-2018-10846"
},
{
"category": "external",
"summary": "SUSE Bug 1105460 for CVE-2018-10846",
"url": "https://bugzilla.suse.com/1105460"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-10846"
},
{
"cve": "CVE-2019-3829",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-3829"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates with GnuTLS 3.5.8 or later is affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-3829",
"url": "https://www.suse.com/security/cve/CVE-2019-3829"
},
{
"category": "external",
"summary": "SUSE Bug 1130681 for CVE-2019-3829",
"url": "https://bugzilla.suse.com/1130681"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-3829"
},
{
"cve": "CVE-2019-3836",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-3836"
}
],
"notes": [
{
"category": "general",
"text": "It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-3836",
"url": "https://www.suse.com/security/cve/CVE-2019-3836"
},
{
"category": "external",
"summary": "SUSE Bug 1130682 for CVE-2019-3836",
"url": "https://bugzilla.suse.com/1130682"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-3836"
},
{
"cve": "CVE-2020-13777",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-13777"
}
],
"notes": [
{
"category": "general",
"text": "GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is 3.6.4 (2018-09-24) because of an error in a 2018-09-18 commit. Until the first key rotation, the TLS server always uses wrong data in place of an encryption key derived from an application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-13777",
"url": "https://www.suse.com/security/cve/CVE-2020-13777"
},
{
"category": "external",
"summary": "SUSE Bug 1172461 for CVE-2020-13777",
"url": "https://bugzilla.suse.com/1172461"
},
{
"category": "external",
"summary": "SUSE Bug 1172506 for CVE-2020-13777",
"url": "https://bugzilla.suse.com/1172506"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-13777"
},
{
"cve": "CVE-2021-20232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-20232"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-20232",
"url": "https://www.suse.com/security/cve/CVE-2021-20232"
},
{
"category": "external",
"summary": "SUSE Bug 1183456 for CVE-2021-20232",
"url": "https://bugzilla.suse.com/1183456"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:gnutls-guile-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-dane0-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls-devel-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-32bit-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutls30-hmac-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx-devel-0:3.7.2-1.2.x86_64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.aarch64",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.ppc64le",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.s390x",
"openSUSE Tumbleweed:libgnutlsxx28-0:3.7.2-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-20232"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.