Security update for gnutls SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:0610-1 Final 1 1 2023-03-03T11:06:59Z current 2023-03-03T11:06:59Z 2023-03-03T11:06:59Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for gnutls This update for gnutls fixes the following issues: - CVE-2023-0361: Fixed a Bleichenbacher oracle in the TLS RSA key exchange (bsc#1208143). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sle15:15.2-2023-610,Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2023-610,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2023-610,Image SLES15-SP3-CHOST-BYOS-Aliyun-2023-610,Image SLES15-SP3-CHOST-BYOS-Azure-2023-610,Image SLES15-SP3-CHOST-BYOS-EC2-2023-610,Image SLES15-SP3-CHOST-BYOS-GCE-2023-610,Image SLES15-SP3-CHOST-BYOS-SAP-CCloud-2023-610,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure-2023-610,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM-2023-610,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE-2023-610,Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure-2023-610,Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM-2023-610,Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE-2023-610,Image SLES15-SP3-Micro-5-1-BYOS-Azure-2023-610,Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM-2023-610,Image SLES15-SP3-Micro-5-1-BYOS-GCE-2023-610,Image SLES15-SP3-Micro-5-2-BYOS-Azure-2023-610,Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM-2023-610,Image SLES15-SP3-Micro-5-2-BYOS-GCE-2023-610,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2023-610,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2023-610,SUSE-2023-610,SUSE-SLE-Product-RT-15-SP3-2023-610,SUSE-SUSE-MicroOS-5.1-2023-610,SUSE-SUSE-MicroOS-5.2-2023-610 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20230610-1/ Link for SUSE-SU-2023:0610-1 https://lists.suse.com/pipermail/sle-security-updates/2023-March/013969.html E-Mail link for SUSE-SU-2023:0610-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1208143 SUSE Bug 1208143 https://www.suse.com/security/cve/CVE-2023-0361/ SUSE CVE CVE-2023-0361 page Container suse/sle15:15.2 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-CHOST-BYOS-Aliyun Image SLES15-SP3-CHOST-BYOS-Azure Image SLES15-SP3-CHOST-BYOS-EC2 Image SLES15-SP3-CHOST-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-SAP-CCloud Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP3-Micro-5-1-BYOS-Azure Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-1-BYOS-GCE Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Real Time 15 SP3 libgnutls30-3.6.7-150200.14.25.2 libgnutls30-hmac-3.6.7-150200.14.25.2 gnutls-3.6.7-150200.14.25.2 gnutls-guile-3.6.7-150200.14.25.2 libgnutls-devel-3.6.7-150200.14.25.2 libgnutls-devel-32bit-3.6.7-150200.14.25.2 libgnutls-devel-64bit-3.6.7-150200.14.25.2 libgnutls30-32bit-3.6.7-150200.14.25.2 libgnutls30-64bit-3.6.7-150200.14.25.2 libgnutls30-hmac-32bit-3.6.7-150200.14.25.2 libgnutls30-hmac-64bit-3.6.7-150200.14.25.2 libgnutlsxx-devel-3.6.7-150200.14.25.2 libgnutlsxx28-3.6.7-150200.14.25.2 libgnutls30-3.6.7-150200.14.25.2 as a component of Container suse/sle15:15.2 libgnutls30-hmac-3.6.7-150200.14.25.2 as a component of Container suse/sle15:15.2 libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-CHOST-BYOS-Aliyun libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-CHOST-BYOS-Azure libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-CHOST-BYOS-EC2 libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-CHOST-BYOS-GCE libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-CHOST-BYOS-SAP-CCloud libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-Micro-5-1-BYOS-Azure libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-Micro-5-1-BYOS-GCE libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-Micro-5-2-BYOS-Azure libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-Micro-5-2-BYOS-GCE libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production libgnutls30-3.6.7-150200.14.25.2 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production libgnutls30-3.6.7-150200.14.25.2 as a component of SUSE Linux Enterprise Micro 5.1 libgnutls30-hmac-3.6.7-150200.14.25.2 as a component of SUSE Linux Enterprise Micro 5.1 gnutls-3.6.7-150200.14.25.2 as a component of SUSE Linux Enterprise Micro 5.2 libgnutls30-3.6.7-150200.14.25.2 as a component of SUSE Linux Enterprise Micro 5.2 libgnutls30-hmac-3.6.7-150200.14.25.2 as a component of SUSE Linux Enterprise Micro 5.2 gnutls-3.6.7-150200.14.25.2 as a component of SUSE Linux Enterprise Real Time 15 SP3 libgnutls-devel-3.6.7-150200.14.25.2 as a component of SUSE Linux Enterprise Real Time 15 SP3 libgnutls30-3.6.7-150200.14.25.2 as a component of SUSE Linux Enterprise Real Time 15 SP3 libgnutls30-32bit-3.6.7-150200.14.25.2 as a component of SUSE Linux Enterprise Real Time 15 SP3 libgnutls30-hmac-3.6.7-150200.14.25.2 as a component of SUSE Linux Enterprise Real Time 15 SP3 libgnutls30-hmac-32bit-3.6.7-150200.14.25.2 as a component of SUSE Linux Enterprise Real Time 15 SP3 libgnutlsxx-devel-3.6.7-150200.14.25.2 as a component of SUSE Linux Enterprise Real Time 15 SP3 libgnutlsxx28-3.6.7-150200.14.25.2 as a component of SUSE Linux Enterprise Real Time 15 SP3 A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection. CVE-2023-0361 Container suse/sle15:15.2:libgnutls30-3.6.7-150200.14.25.2 Container suse/sle15:15.2:libgnutls30-hmac-3.6.7-150200.14.25.2 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-CHOST-BYOS-Aliyun:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-CHOST-BYOS-Azure:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-CHOST-BYOS-EC2:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-CHOST-BYOS-GCE:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-Micro-5-1-BYOS-Azure:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-Micro-5-1-BYOS-GCE:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-Micro-5-2-BYOS-Azure:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-Micro-5-2-BYOS-GCE:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libgnutls30-3.6.7-150200.14.25.2 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libgnutls30-3.6.7-150200.14.25.2 SUSE Linux Enterprise Micro 5.1:libgnutls30-3.6.7-150200.14.25.2 SUSE Linux Enterprise Micro 5.1:libgnutls30-hmac-3.6.7-150200.14.25.2 SUSE Linux Enterprise Micro 5.2:gnutls-3.6.7-150200.14.25.2 SUSE Linux Enterprise Micro 5.2:libgnutls30-3.6.7-150200.14.25.2 SUSE Linux Enterprise Micro 5.2:libgnutls30-hmac-3.6.7-150200.14.25.2 SUSE Linux Enterprise Real Time 15 SP3:gnutls-3.6.7-150200.14.25.2 SUSE Linux Enterprise Real Time 15 SP3:libgnutls-devel-3.6.7-150200.14.25.2 SUSE Linux Enterprise Real Time 15 SP3:libgnutls30-3.6.7-150200.14.25.2 SUSE Linux Enterprise Real Time 15 SP3:libgnutls30-32bit-3.6.7-150200.14.25.2 SUSE Linux Enterprise Real Time 15 SP3:libgnutls30-hmac-3.6.7-150200.14.25.2 SUSE Linux Enterprise Real Time 15 SP3:libgnutls30-hmac-32bit-3.6.7-150200.14.25.2 SUSE Linux Enterprise Real Time 15 SP3:libgnutlsxx-devel-3.6.7-150200.14.25.2 SUSE Linux Enterprise Real Time 15 SP3:libgnutlsxx28-3.6.7-150200.14.25.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230610-1/ https://www.suse.com/security/cve/CVE-2023-0361.html CVE-2023-0361 https://bugzilla.suse.com/1208143 SUSE Bug 1208143