From ada748f54ffd0835405249eae8f76a43593555be Mon Sep 17 00:00:00 2001 From: Tijl Coosemans Date: Tue, 31 Mar 2020 15:52:41 +0000 Subject: [PATCH] Add entry for GNUTLS-SA-2020-03-31 (flaw in DTLS). Security: https://gnutls.org/security-new.html#GNUTLS-SA-2020-03-31 --- security/vuxml/vuln.xml | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index fa40a02ead02..2fa2b22c54a8 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -58,6 +58,34 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> + + GnuTLS -- flaw in DTLS protocol implementation + + + gnutls + 3.6.13 + + + + +

The GnuTLS project reports:

+
+

It was found that GnuTLS 3.6.3 introduced a regression in the DTLS + protocol implementation. This caused the DTLS client to not + contribute any randomness to the DTLS negotiation breaking the + security guarantees of the DTLS protocol.

+
+ + + + https://gnutls.org/security-new.html#GNUTLS-SA-2020-03-31 + + + 2020-03-31 + 2020-03-31 + + + PostgresSQL -- ALTER ... DEPENDS ON EXTENSION is missing authorization checks