File _patchinfo of Package patchinfo.16449
<patchinfo incident="16449">
<issue tracker="cve" id="2020-24659"/>
<issue tracker="bnc" id="1176181">VUL-0: CVE-2020-24659: gnutls: Heap buffer overflow in handshake with no_renegotiation alert sent</issue>
<issue tracker="bnc" id="1176086">FIPS: gnutls: Implement (EC)DH requirements from SP800-56Arev3</issue>
<issue tracker="bnc" id="1176671">FIPS: gnutls: Add TLS KDF selftest</issue>
<packager>vitezslav_cizek</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for gnutls</summary>
<description>This update for gnutls fixes the following issues:
- Fix heap buffer overflow in handshake with no_renegotiation alert sent (CVE-2020-24659 bsc#1176181)
- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
- FIPS: Add TLS KDF selftest (bsc#1176671)
</description>
</patchinfo>