kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add entry for GNUTLS-SA-2020-03-31 (flaw in DTLS).

Browse source 
Security:	https://gnutls.org/security-new.html#GNUTLS-SA-2020-03-31
This commit is contained in:
Tijl Coosemans 2020-03-31 15:52:41 +00:00
parent 447cb1eb99
commit ada748f54f
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=529982
1 changed files with 28 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

28
security/vuxml/vuln.xml
View file

@ -58,6 +58,34 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
<vuln vid="d887b3d9-7366-11ea-b81a-001cc0382b2f">
<topic>GnuTLS -- flaw in DTLS protocol implementation</topic>
<affects>
<package>
<name>gnutls</name>
<range><lt>3.6.13</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>The GnuTLS project reports:</p>
<blockquote cite="https://gnutls.org/security-new.html#GNUTLS-SA-2020-03-31">
<p>It was found that GnuTLS 3.6.3 introduced a regression in the DTLS
protocol implementation. This caused the DTLS client to not
contribute any randomness to the DTLS negotiation breaking the
security guarantees of the DTLS protocol.</p>
</blockquote>
</body>
</description>
<references>
<url>https://gnutls.org/security-new.html#GNUTLS-SA-2020-03-31</url>
</references>
<dates>
<discovery>2020-03-31</discovery>
<entry>2020-03-31</entry>
</dates>
</vuln>
<vuln vid="d331f691-71f4-11ea-8bb5-6cc21735f730">
<topic>PostgresSQL -- ALTER ... DEPENDS ON EXTENSION is missing authorization checks</topic>
<affects>