Security update for gnutls SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:1526-1 Final 1 1 2015-08-14T13:32:55Z current 2015-08-14T13:32:55Z 2015-08-14T13:32:55Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for gnutls This security update of gnutls fixes the following issues: - use minimal padding for CBC, the default random length padding causes problems with some servers (bsc#925499) * added gnutls-use_minimal_cbc_padding.patch - use the default DH minimum for gnutls-cli instead of hardcoding 512 * CVE-2015-4000 (Logjam) (bsc#932026) * added gnutls-CVE-2015-4000-logjam-use_the_default_DH_min_for_cli.patch The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp3-gnutls-12081,sdksp4-gnutls-12081,sledsp3-gnutls-12081,sledsp4-gnutls-12081,slehasp3-gnutls-12081,slehasp4-gnutls-12081,slessp3-gnutls-12081,slessp4-gnutls-12081 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20151526-1/ Link for SUSE-SU-2015:1526-1 https://lists.suse.com/pipermail/sle-security-updates/2015-September/001587.html E-Mail link for SUSE-SU-2015:1526-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/925499 SUSE Bug 925499 https://bugzilla.suse.com/932026 SUSE Bug 932026 https://www.suse.com/security/cve/CVE-2015-4000/ SUSE CVE CVE-2015-4000 page SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise High Availability Extension 11 SP3 SUSE Linux Enterprise High Availability Extension 11 SP4 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 libgnutls-devel-2.4.1-24.39.57.1 libgnutls-extra-devel-2.4.1-24.39.57.1 libgnutls-extra26-2.4.1-24.39.57.1 gnutls-2.4.1-24.39.57.1 libgnutls26-2.4.1-24.39.57.1 libgnutls26-32bit-2.4.1-24.39.57.1 libgnutls26-x86-2.4.1-24.39.57.1 gnutls-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 libgnutls26-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 libgnutls26-32bit-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 gnutls-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Desktop 11 SP4 libgnutls26-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Desktop 11 SP4 libgnutls26-32bit-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Desktop 11 SP4 libgnutls-extra26-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise High Availability Extension 11 SP3 libgnutls-extra26-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise High Availability Extension 11 SP4 gnutls-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server 11 SP3 libgnutls-extra26-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server 11 SP3 libgnutls26-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server 11 SP3 libgnutls26-32bit-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server 11 SP3 libgnutls26-x86-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server 11 SP3 gnutls-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libgnutls-extra26-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libgnutls26-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libgnutls26-32bit-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libgnutls26-x86-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA gnutls-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server 11 SP4 libgnutls-extra26-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server 11 SP4 libgnutls26-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server 11 SP4 libgnutls26-32bit-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server 11 SP4 libgnutls26-x86-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server 11 SP4 gnutls-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 libgnutls-extra26-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 libgnutls26-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 libgnutls26-32bit-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 libgnutls26-x86-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 gnutls-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libgnutls-extra26-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libgnutls26-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libgnutls26-32bit-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libgnutls26-x86-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libgnutls-devel-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 libgnutls-extra-devel-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 libgnutls-extra26-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 libgnutls-devel-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libgnutls-extra-devel-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libgnutls-extra26-2.4.1-24.39.57.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue. CVE-2015-4000 SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.57.1 SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.57.1 SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-32bit-2.4.1-24.39.57.1 SUSE Linux Enterprise Desktop 11 SP4:gnutls-2.4.1-24.39.57.1 SUSE Linux Enterprise Desktop 11 SP4:libgnutls26-2.4.1-24.39.57.1 SUSE Linux Enterprise Desktop 11 SP4:libgnutls26-32bit-2.4.1-24.39.57.1 SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.57.1 SUSE Linux Enterprise High Availability Extension 11 SP4:libgnutls-extra26-2.4.1-24.39.57.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.57.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.57.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.57.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.57.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-x86-2.4.1-24.39.57.1 SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.57.1 SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.57.1 SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.57.1 SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.57.1 SUSE Linux Enterprise Server 11 SP3:libgnutls26-x86-2.4.1-24.39.57.1 SUSE Linux Enterprise Server 11 SP4:gnutls-2.4.1-24.39.57.1 SUSE Linux Enterprise Server 11 SP4:libgnutls-extra26-2.4.1-24.39.57.1 SUSE Linux Enterprise Server 11 SP4:libgnutls26-2.4.1-24.39.57.1 SUSE Linux Enterprise Server 11 SP4:libgnutls26-32bit-2.4.1-24.39.57.1 SUSE Linux Enterprise Server 11 SP4:libgnutls26-x86-2.4.1-24.39.57.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.57.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.57.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.57.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.57.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-x86-2.4.1-24.39.57.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gnutls-2.4.1-24.39.57.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libgnutls-extra26-2.4.1-24.39.57.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libgnutls26-2.4.1-24.39.57.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libgnutls26-32bit-2.4.1-24.39.57.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libgnutls26-x86-2.4.1-24.39.57.1 SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.57.1 SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.57.1 SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.57.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libgnutls-devel-2.4.1-24.39.57.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libgnutls-extra-devel-2.4.1-24.39.57.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libgnutls-extra26-2.4.1-24.39.57.1 important 7.3 AV:N/AC:H/Au:N/C:C/I:C/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151526-1/ https://www.suse.com/security/cve/CVE-2015-4000.html CVE-2015-4000 https://bugzilla.suse.com/1074631 SUSE Bug 1074631 https://bugzilla.suse.com/1211968 SUSE Bug 1211968 https://bugzilla.suse.com/931600 SUSE Bug 931600 https://bugzilla.suse.com/931698 SUSE Bug 931698 https://bugzilla.suse.com/931723 SUSE Bug 931723 https://bugzilla.suse.com/931845 SUSE Bug 931845 https://bugzilla.suse.com/932026 SUSE Bug 932026 https://bugzilla.suse.com/932483 SUSE Bug 932483 https://bugzilla.suse.com/934789 SUSE Bug 934789 https://bugzilla.suse.com/935033 SUSE Bug 935033 https://bugzilla.suse.com/935540 SUSE Bug 935540 https://bugzilla.suse.com/935979 SUSE Bug 935979 https://bugzilla.suse.com/937202 SUSE Bug 937202 https://bugzilla.suse.com/937766 SUSE Bug 937766 https://bugzilla.suse.com/938248 SUSE Bug 938248 https://bugzilla.suse.com/938432 SUSE Bug 938432 https://bugzilla.suse.com/938895 SUSE Bug 938895 https://bugzilla.suse.com/938905 SUSE Bug 938905 https://bugzilla.suse.com/938906 SUSE Bug 938906 https://bugzilla.suse.com/938913 SUSE Bug 938913 https://bugzilla.suse.com/938945 SUSE Bug 938945 https://bugzilla.suse.com/943664 SUSE Bug 943664 https://bugzilla.suse.com/944729 SUSE Bug 944729 https://bugzilla.suse.com/945582 SUSE Bug 945582 https://bugzilla.suse.com/955589 SUSE Bug 955589 https://bugzilla.suse.com/980406 SUSE Bug 980406 https://bugzilla.suse.com/990592 SUSE Bug 990592 https://bugzilla.suse.com/994144 SUSE Bug 994144