products/SUSE_ALP_Standard
9
0
Fork 1
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

Adding patchinfo patchinfo.20240716152951605678.269002615871826

Browse Source
This commit is contained in:
Adrian Schröter 2024-08-28 13:35:52 +02:00
parent ccdfd0ebce
commit 6714d842ae
2 changed files with 22 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
gnutls

@ -1 +1 @@
Subproject commit 294a8358c2486ef3f5ba71fb87154f9cf1273b28
Subproject commit b01515ed93e8f8bd215d81fd1b037970ab441473

21
patchinfo.20240716152951605678.269002615871826/_patchinfo Normal file
View File

@ -0,0 +1,21 @@
<patchinfo>
<!-- generated from request(s) 338947 -->
<issue tracker="bnc" id="1221242">Memory leak in gnutls &#8212; ref:_00D1igLOd._500Tr6tLDN:ref</issue>
<issue tracker="bnc" id="1221746">VUL-0: CVE-2024-28834: gnutls: side-channel in the deterministic ECDSA</issue>
<issue tracker="bnc" id="1221747">VUL-0: CVE-2024-28835: gnutls: certtool crash when verifying a certificate chain</issue>
<issue tracker="cve" id="2024-28834"/>
<issue tracker="cve" id="2024-28835"/>
<packager>pmonrealgonzalez</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for gnutls</summary>
<description>This update for gnutls fixes the following issues:
- CVE-2024-28835: certtool crash when verifying a certificate chain (bsc#1221747)
- CVE-2024-28834: Fixed side-channel in the deterministic ECDSA (bsc#1221746)
- jitterentropy: Release the memory of the entropy collector when using jitterentropy
with phtreads as there is also a pre-initialization done in the main thread. (bsc#1221242)
</description>
<package>gnutls</package>
<seperate_build_arch/>
</patchinfo>