Описание
Security update for glib-networking
This update for glib-networking fixes the following issues:
- CVE-2020-13645: Fixed a connection failure when the server identity is unset (bsc#1172460).
Список пакетов
Image SLES15-SAP-Azure-LI-BYOS-Production
glib-networking-2.54.1-3.6.1
Image SLES15-SAP-Azure-VLI-BYOS-Production
glib-networking-2.54.1-3.6.1
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production
glib-networking-2.54.1-3.6.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production
glib-networking-2.54.1-3.6.1
SUSE Enterprise Storage 6
glib-networking-2.54.1-3.6.1
glib-networking-lang-2.54.1-3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS
glib-networking-2.54.1-3.6.1
glib-networking-lang-2.54.1-3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
glib-networking-2.54.1-3.6.1
glib-networking-lang-2.54.1-3.6.1
SUSE Linux Enterprise High Performance Computing 15-ESPOS
glib-networking-2.54.1-3.6.1
glib-networking-lang-2.54.1-3.6.1
SUSE Linux Enterprise High Performance Computing 15-LTSS
glib-networking-2.54.1-3.6.1
glib-networking-lang-2.54.1-3.6.1
SUSE Linux Enterprise Server 15 SP1-BCL
glib-networking-2.54.1-3.6.1
glib-networking-lang-2.54.1-3.6.1
SUSE Linux Enterprise Server 15 SP1-LTSS
glib-networking-2.54.1-3.6.1
glib-networking-lang-2.54.1-3.6.1
SUSE Linux Enterprise Server 15-LTSS
glib-networking-2.54.1-3.6.1
glib-networking-lang-2.54.1-3.6.1
SUSE Linux Enterprise Server for SAP Applications 15
glib-networking-2.54.1-3.6.1
glib-networking-lang-2.54.1-3.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
glib-networking-2.54.1-3.6.1
glib-networking-lang-2.54.1-3.6.1
Ссылки
- Link for SUSE-SU-2021:3997-1
- E-Mail link for SUSE-SU-2021:3997-1
- SUSE Security Ratings
- SUSE Bug 1172460
- SUSE CVE CVE-2020-13645 page
Описание
In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.
Затронутые продукты
Image SLES15-SAP-Azure-LI-BYOS-Production:glib-networking-2.54.1-3.6.1
Image SLES15-SAP-Azure-VLI-BYOS-Production:glib-networking-2.54.1-3.6.1
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:glib-networking-2.54.1-3.6.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:glib-networking-2.54.1-3.6.1
Ссылки
- CVE-2020-13645
- SUSE Bug 1172460