Hello community, here is the log from the commit of package patchinfo.14649 for openSUSE:Leap:15.1:Update checked in at 2020-10-25 00:22:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.1:Update/patchinfo.14649 (Old) and /work/SRC/openSUSE:Leap:15.1:Update/.patchinfo.14649.new.3463 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "patchinfo.14649" Sun Oct 25 00:22:03 2020 rev:1 rq:843265 version:unknown Changes: -------- New Changes file: NO CHANGES FILE!!! New: ---- _patchinfo ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _patchinfo ++++++ <patchinfo incident="14649"> <issue tracker="cve" id="2020-24659"/> <issue tracker="bnc" id="1176181">VUL-0: CVE-2020-24659: gnutls: Heap buffer overflow in handshake with no_renegotiation alert sent</issue> <issue tracker="bnc" id="1176086">FIPS: gnutls: Implement (EC)DH requirements from SP800-56Arev3</issue> <issue tracker="bnc" id="1176671">FIPS: gnutls: Add TLS KDF selftest</issue> <packager>vitezslav_cizek</packager> <rating>moderate</rating> <category>security</category> <summary>Security update for gnutls</summary> <description>This update for gnutls fixes the following issues: - Fix heap buffer overflow in handshake with no_renegotiation alert sent (CVE-2020-24659 bsc#1176181) - FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086) - FIPS: Use 2048 bit prime in DH selftest (bsc#1176086) - FIPS: Add TLS KDF selftest (bsc#1176671) This update was imported from the SUSE:SLE-15:Update update project.</description> </patchinfo>
