Security update for gnutls SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:2830-1 Final 1 1 2022-08-17T12:36:56Z current 2022-08-17T12:36:56Z 2022-08-17T12:36:56Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for gnutls This update for gnutls fixes the following issues: - CVE-2022-2509: Fixed a double free issue during PKCS7 verification (bsc#1202020). - CVE-2021-4209: Fixed null pointer dereference in MD_UPDATE (bsc#1196167). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/cilium-operator:1.6.6-2022-2830,Container caasp/v4/cilium:1.6.6-2022-2830,Container caasp/v4/helm-tiller:2.16.12-2022-2830,Container suse/sle15:15.0-2022-2830,Container suse/sle15:15.1-2022-2830,SUSE-2022-2830,SUSE-SLE-Product-HPC-15-2022-2830,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-2830,SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-2830,SUSE-SLE-Product-SLES-15-2022-2830,SUSE-SLE-Product-SLES-15-SP1-BCL-2022-2830,SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-2830,SUSE-SLE-Product-SLES_SAP-15-2022-2830,SUSE-SLE-Product-SLES_SAP-15-SP1-2022-2830,SUSE-Storage-6-2022-2830 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20222830-1/ Link for SUSE-SU-2022:2830-1 https://lists.suse.com/pipermail/sle-security-updates/2022-August/011930.html E-Mail link for SUSE-SU-2022:2830-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1196167 SUSE Bug 1196167 https://bugzilla.suse.com/1202020 SUSE Bug 1202020 https://www.suse.com/security/cve/CVE-2021-4209/ SUSE CVE CVE-2021-4209 page https://www.suse.com/security/cve/CVE-2022-2509/ SUSE CVE CVE-2022-2509 page Container caasp/v4/cilium-operator:1.6.6 Container caasp/v4/cilium:1.6.6 Container caasp/v4/helm-tiller:2.16.12 Container suse/sle15:15.0 Container suse/sle15:15.1 SUSE Enterprise Storage 6 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 15 SP1-BCL SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 libgnutls30-3.6.7-150000.6.45.2 gnutls-3.6.7-150000.6.45.2 gnutls-guile-3.6.7-150000.6.45.2 libgnutls-devel-3.6.7-150000.6.45.2 libgnutls-devel-32bit-3.6.7-150000.6.45.2 libgnutls-devel-64bit-3.6.7-150000.6.45.2 libgnutls30-32bit-3.6.7-150000.6.45.2 libgnutls30-64bit-3.6.7-150000.6.45.2 libgnutls30-hmac-3.6.7-150000.6.45.2 libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 libgnutls30-hmac-64bit-3.6.7-150000.6.45.2 libgnutlsxx-devel-3.6.7-150000.6.45.2 libgnutlsxx28-3.6.7-150000.6.45.2 libgnutls30-3.6.7-150000.6.45.2 as a component of Container caasp/v4/cilium-operator:1.6.6 libgnutls30-3.6.7-150000.6.45.2 as a component of Container caasp/v4/cilium:1.6.6 libgnutls30-3.6.7-150000.6.45.2 as a component of Container caasp/v4/helm-tiller:2.16.12 libgnutls30-3.6.7-150000.6.45.2 as a component of Container suse/sle15:15.0 libgnutls30-3.6.7-150000.6.45.2 as a component of Container suse/sle15:15.1 gnutls-3.6.7-150000.6.45.2 as a component of SUSE Enterprise Storage 6 libgnutls-devel-3.6.7-150000.6.45.2 as a component of SUSE Enterprise Storage 6 libgnutls30-3.6.7-150000.6.45.2 as a component of SUSE Enterprise Storage 6 libgnutls30-32bit-3.6.7-150000.6.45.2 as a component of SUSE Enterprise Storage 6 libgnutls30-hmac-3.6.7-150000.6.45.2 as a component of SUSE Enterprise Storage 6 libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 as a component of SUSE Enterprise Storage 6 libgnutlsxx-devel-3.6.7-150000.6.45.2 as a component of SUSE Enterprise Storage 6 libgnutlsxx28-3.6.7-150000.6.45.2 as a component of SUSE Enterprise Storage 6 gnutls-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libgnutls-devel-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libgnutls30-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libgnutls30-32bit-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libgnutls30-hmac-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libgnutlsxx-devel-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libgnutlsxx28-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS gnutls-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libgnutls-devel-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libgnutls30-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libgnutls30-32bit-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libgnutls30-hmac-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libgnutlsxx-devel-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libgnutlsxx28-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS gnutls-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libgnutls-devel-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libgnutls30-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libgnutls30-32bit-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libgnutls30-hmac-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libgnutlsxx-devel-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libgnutlsxx28-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS gnutls-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libgnutls-devel-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libgnutls30-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libgnutls30-32bit-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libgnutls30-hmac-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libgnutlsxx-devel-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libgnutlsxx28-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS gnutls-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libgnutls-devel-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libgnutls30-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libgnutls30-32bit-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libgnutls30-hmac-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libgnutlsxx-devel-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libgnutlsxx28-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15 SP1-BCL gnutls-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libgnutls-devel-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libgnutls30-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libgnutls30-32bit-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libgnutls30-hmac-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libgnutlsxx-devel-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libgnutlsxx28-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS gnutls-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15-LTSS libgnutls-devel-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15-LTSS libgnutls30-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15-LTSS libgnutls30-32bit-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15-LTSS libgnutls30-hmac-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15-LTSS libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15-LTSS libgnutlsxx-devel-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15-LTSS libgnutlsxx28-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server 15-LTSS gnutls-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libgnutls-devel-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libgnutls30-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libgnutls30-32bit-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libgnutls30-hmac-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libgnutlsxx-devel-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libgnutlsxx28-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 gnutls-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libgnutls-devel-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libgnutls30-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libgnutls30-32bit-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libgnutls30-hmac-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libgnutlsxx-devel-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libgnutlsxx28-3.6.7-150000.6.45.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances. CVE-2021-4209 Container caasp/v4/cilium-operator:1.6.6:libgnutls30-3.6.7-150000.6.45.2 Container caasp/v4/cilium:1.6.6:libgnutls30-3.6.7-150000.6.45.2 Container caasp/v4/helm-tiller:2.16.12:libgnutls30-3.6.7-150000.6.45.2 Container suse/sle15:15.0:libgnutls30-3.6.7-150000.6.45.2 Container suse/sle15:15.1:libgnutls30-3.6.7-150000.6.45.2 SUSE Enterprise Storage 6:gnutls-3.6.7-150000.6.45.2 SUSE Enterprise Storage 6:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Enterprise Storage 6:libgnutls30-3.6.7-150000.6.45.2 SUSE Enterprise Storage 6:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Enterprise Storage 6:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Enterprise Storage 6:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Enterprise Storage 6:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Enterprise Storage 6:libgnutlsxx28-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:gnutls-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libgnutls30-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libgnutlsxx28-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:gnutls-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgnutls30-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgnutlsxx28-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:gnutls-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libgnutls30-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libgnutlsxx28-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:gnutls-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libgnutls30-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libgnutlsxx28-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-BCL:gnutls-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-BCL:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-BCL:libgnutls30-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-BCL:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-BCL:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-BCL:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-BCL:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-BCL:libgnutlsxx28-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-LTSS:gnutls-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libgnutls30-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libgnutlsxx28-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15-LTSS:gnutls-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15-LTSS:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15-LTSS:libgnutls30-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15-LTSS:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15-LTSS:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15-LTSS:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15-LTSS:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15-LTSS:libgnutlsxx28-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:gnutls-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgnutls30-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgnutlsxx28-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15:gnutls-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15:libgnutls30-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15:libgnutlsxx28-3.6.7-150000.6.45.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222830-1/ https://www.suse.com/security/cve/CVE-2021-4209.html CVE-2021-4209 https://bugzilla.suse.com/1196167 SUSE Bug 1196167 A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function. CVE-2022-2509 Container caasp/v4/cilium-operator:1.6.6:libgnutls30-3.6.7-150000.6.45.2 Container caasp/v4/cilium:1.6.6:libgnutls30-3.6.7-150000.6.45.2 Container caasp/v4/helm-tiller:2.16.12:libgnutls30-3.6.7-150000.6.45.2 Container suse/sle15:15.0:libgnutls30-3.6.7-150000.6.45.2 Container suse/sle15:15.1:libgnutls30-3.6.7-150000.6.45.2 SUSE Enterprise Storage 6:gnutls-3.6.7-150000.6.45.2 SUSE Enterprise Storage 6:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Enterprise Storage 6:libgnutls30-3.6.7-150000.6.45.2 SUSE Enterprise Storage 6:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Enterprise Storage 6:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Enterprise Storage 6:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Enterprise Storage 6:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Enterprise Storage 6:libgnutlsxx28-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:gnutls-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libgnutls30-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libgnutlsxx28-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:gnutls-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgnutls30-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgnutlsxx28-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:gnutls-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libgnutls30-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libgnutlsxx28-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:gnutls-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libgnutls30-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libgnutlsxx28-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-BCL:gnutls-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-BCL:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-BCL:libgnutls30-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-BCL:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-BCL:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-BCL:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-BCL:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-BCL:libgnutlsxx28-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-LTSS:gnutls-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libgnutls30-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libgnutlsxx28-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15-LTSS:gnutls-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15-LTSS:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15-LTSS:libgnutls30-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15-LTSS:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15-LTSS:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15-LTSS:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15-LTSS:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server 15-LTSS:libgnutlsxx28-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:gnutls-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgnutls30-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgnutlsxx28-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15:gnutls-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15:libgnutls-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15:libgnutls30-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15:libgnutls30-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15:libgnutls30-hmac-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15:libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15:libgnutlsxx-devel-3.6.7-150000.6.45.2 SUSE Linux Enterprise Server for SAP Applications 15:libgnutlsxx28-3.6.7-150000.6.45.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222830-1/ https://www.suse.com/security/cve/CVE-2022-2509.html CVE-2022-2509 https://bugzilla.suse.com/1202020 SUSE Bug 1202020 https://bugzilla.suse.com/1202593 SUSE Bug 1202593