SUSE-SU-2015:0675-1 - Vulnerability-Lookup

SUSE-SU-2015:0675-1

Vulnerability from csaf_suse - Published: 2014-06-03 20:02 - Updated: 2014-06-03 20:02

Summary

Security update for gnutls

Severity

Moderate

Notes

Title of the patch: Security update for gnutls

Description of the patch: GnuTLS has been patched to ensure proper parsing of session ids during the TLS/SSL handshake. Additionally, three issues inherited from libtasn1 have been fixed. Further information is available at http://www.gnutls.org/security.html#GNUTLS-SA-2014-3 <http://www.gnutls.org/security.html#GNUTLS-SA-2014-3> These security issues have been fixed: * Possible memory corruption during connect (CVE-2014-3466) * Multiple boundary check issues could allow DoS (CVE-2014-3467) * asn1_get_bit_der() can return negative bit length (CVE-2014-3468) * Possible DoS by NULL pointer dereference (CVE-2014-3469) Security Issue references: * CVE-2014-3466 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3466>

Patchnames: sdksp3-gnutls,sledsp3-gnutls,slehasp3-gnutls,sleman17sp2-gnutls,slessp3-gnutls

Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

CVE-2009-5138

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2013-2116

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2014-0092

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2014-3466

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2014-8155

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2015-0282

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2015-0294

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

References

URL

Category

	https://www.suse.com/support/security/rating/	external
	https://ftp.suse.com/pub/projects/security/csaf/s…	self
	https://www.suse.com/support/update/announcement/…	self
	https://lists.suse.com/pipermail/sle-security-upd…	self
	https://bugzilla.suse.com/821818	self
	https://bugzilla.suse.com/835760	self
	https://bugzilla.suse.com/865804	self
	https://bugzilla.suse.com/865993	self
	https://bugzilla.suse.com/880730	self
	https://bugzilla.suse.com/880910	self
	https://bugzilla.suse.com/919938	self
	https://bugzilla.suse.com/921684	self
	https://www.suse.com/security/cve/CVE-2009-5138/	self
	https://www.suse.com/security/cve/CVE-2013-2116/	self
	https://www.suse.com/security/cve/CVE-2014-0092/	self
	https://www.suse.com/security/cve/CVE-2014-3466/	self
	https://www.suse.com/security/cve/CVE-2014-8155/	self
	https://www.suse.com/security/cve/CVE-2015-0282/	self
	https://www.suse.com/security/cve/CVE-2015-0294/	self
	https://www.suse.com/security/cve/CVE-2009-5138	external
	https://bugzilla.suse.com/865993	external
	https://www.suse.com/security/cve/CVE-2013-2116	external
	https://bugzilla.suse.com/821818	external
	https://www.suse.com/security/cve/CVE-2014-0092	external
	https://bugzilla.suse.com/865804	external
	https://bugzilla.suse.com/915878	external
	https://www.suse.com/security/cve/CVE-2014-3466	external
	https://bugzilla.suse.com/880730	external
	https://www.suse.com/security/cve/CVE-2014-8155	external
	https://bugzilla.suse.com/920366	external
	https://www.suse.com/security/cve/CVE-2015-0282	external
	https://bugzilla.suse.com/919938	external
	https://bugzilla.suse.com/921684	external
	https://www.suse.com/security/cve/CVE-2015-0294	external
	https://bugzilla.suse.com/919938	external

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for gnutls",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nGnuTLS has been patched to ensure proper parsing of session ids during the \nTLS/SSL handshake. Additionally, three issues inherited from libtasn1 have \nbeen fixed.\n\nFurther information is available at \nhttp://www.gnutls.org/security.html#GNUTLS-SA-2014-3\n\u003chttp://www.gnutls.org/security.html#GNUTLS-SA-2014-3\u003e\n\nThese security issues have been fixed:\n\n    * Possible memory corruption during connect (CVE-2014-3466)\n    * Multiple boundary check issues could allow DoS (CVE-2014-3467)\n    * asn1_get_bit_der() can return negative bit length (CVE-2014-3468)\n    * Possible DoS by NULL pointer dereference (CVE-2014-3469)\n\nSecurity Issue references:\n\n    * CVE-2014-3466\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3466\u003e\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "sdksp3-gnutls,sledsp3-gnutls,slehasp3-gnutls,sleman17sp2-gnutls,slessp3-gnutls",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_0675-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2015:0675-1",
        "url": "https://www.suse.com/support/update/announcement/2015/suse-su-20150675-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2015:0675-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2015-April/001333.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 821818",
        "url": "https://bugzilla.suse.com/821818"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 835760",
        "url": "https://bugzilla.suse.com/835760"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 865804",
        "url": "https://bugzilla.suse.com/865804"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 865993",
        "url": "https://bugzilla.suse.com/865993"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 880730",
        "url": "https://bugzilla.suse.com/880730"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 880910",
        "url": "https://bugzilla.suse.com/880910"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 919938",
        "url": "https://bugzilla.suse.com/919938"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 921684",
        "url": "https://bugzilla.suse.com/921684"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2009-5138 page",
        "url": "https://www.suse.com/security/cve/CVE-2009-5138/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2013-2116 page",
        "url": "https://www.suse.com/security/cve/CVE-2013-2116/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-0092 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-0092/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3466 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3466/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8155 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8155/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0282 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0282/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0294 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0294/"
      }
    ],
    "title": "Security update for gnutls",
    "tracking": {
      "current_release_date": "2014-06-03T20:02:07Z",
      "generator": {
        "date": "2014-06-03T20:02:07Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2015:0675-1",
      "initial_release_date": "2014-06-03T20:02:07Z",
      "revision_history": [
        {
          "date": "2014-06-03T20:02:07Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libgnutls-devel-2.4.1-24.39.51.1.i586",
                "product": {
                  "name": "libgnutls-devel-2.4.1-24.39.51.1.i586",
                  "product_id": "libgnutls-devel-2.4.1-24.39.51.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-extra-devel-2.4.1-24.39.51.1.i586",
                "product": {
                  "name": "libgnutls-extra-devel-2.4.1-24.39.51.1.i586",
                  "product_id": "libgnutls-extra-devel-2.4.1-24.39.51.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-extra26-2.4.1-24.39.51.1.i586",
                "product": {
                  "name": "libgnutls-extra26-2.4.1-24.39.51.1.i586",
                  "product_id": "libgnutls-extra26-2.4.1-24.39.51.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "gnutls-2.4.1-24.39.51.1.i586",
                "product": {
                  "name": "gnutls-2.4.1-24.39.51.1.i586",
                  "product_id": "gnutls-2.4.1-24.39.51.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls26-2.4.1-24.39.51.1.i586",
                "product": {
                  "name": "libgnutls26-2.4.1-24.39.51.1.i586",
                  "product_id": "libgnutls26-2.4.1-24.39.51.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libgnutls-devel-2.4.1-24.39.51.1.ia64",
                "product": {
                  "name": "libgnutls-devel-2.4.1-24.39.51.1.ia64",
                  "product_id": "libgnutls-devel-2.4.1-24.39.51.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-extra-devel-2.4.1-24.39.51.1.ia64",
                "product": {
                  "name": "libgnutls-extra-devel-2.4.1-24.39.51.1.ia64",
                  "product_id": "libgnutls-extra-devel-2.4.1-24.39.51.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-extra26-2.4.1-24.39.51.1.ia64",
                "product": {
                  "name": "libgnutls-extra26-2.4.1-24.39.51.1.ia64",
                  "product_id": "libgnutls-extra26-2.4.1-24.39.51.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "gnutls-2.4.1-24.39.51.1.ia64",
                "product": {
                  "name": "gnutls-2.4.1-24.39.51.1.ia64",
                  "product_id": "gnutls-2.4.1-24.39.51.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls26-2.4.1-24.39.51.1.ia64",
                "product": {
                  "name": "libgnutls26-2.4.1-24.39.51.1.ia64",
                  "product_id": "libgnutls26-2.4.1-24.39.51.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls26-x86-2.4.1-24.39.51.1.ia64",
                "product": {
                  "name": "libgnutls26-x86-2.4.1-24.39.51.1.ia64",
                  "product_id": "libgnutls26-x86-2.4.1-24.39.51.1.ia64"
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libgnutls-devel-2.4.1-24.39.51.1.ppc64",
                "product": {
                  "name": "libgnutls-devel-2.4.1-24.39.51.1.ppc64",
                  "product_id": "libgnutls-devel-2.4.1-24.39.51.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64",
                "product": {
                  "name": "libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64",
                  "product_id": "libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
                "product": {
                  "name": "libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
                  "product_id": "libgnutls-extra26-2.4.1-24.39.51.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "gnutls-2.4.1-24.39.51.1.ppc64",
                "product": {
                  "name": "gnutls-2.4.1-24.39.51.1.ppc64",
                  "product_id": "gnutls-2.4.1-24.39.51.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls26-2.4.1-24.39.51.1.ppc64",
                "product": {
                  "name": "libgnutls26-2.4.1-24.39.51.1.ppc64",
                  "product_id": "libgnutls26-2.4.1-24.39.51.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
                "product": {
                  "name": "libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
                  "product_id": "libgnutls26-32bit-2.4.1-24.39.51.1.ppc64"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libgnutls-devel-2.4.1-24.39.51.1.s390x",
                "product": {
                  "name": "libgnutls-devel-2.4.1-24.39.51.1.s390x",
                  "product_id": "libgnutls-devel-2.4.1-24.39.51.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-extra-devel-2.4.1-24.39.51.1.s390x",
                "product": {
                  "name": "libgnutls-extra-devel-2.4.1-24.39.51.1.s390x",
                  "product_id": "libgnutls-extra-devel-2.4.1-24.39.51.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-extra26-2.4.1-24.39.51.1.s390x",
                "product": {
                  "name": "libgnutls-extra26-2.4.1-24.39.51.1.s390x",
                  "product_id": "libgnutls-extra26-2.4.1-24.39.51.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "gnutls-2.4.1-24.39.51.1.s390x",
                "product": {
                  "name": "gnutls-2.4.1-24.39.51.1.s390x",
                  "product_id": "gnutls-2.4.1-24.39.51.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls26-2.4.1-24.39.51.1.s390x",
                "product": {
                  "name": "libgnutls26-2.4.1-24.39.51.1.s390x",
                  "product_id": "libgnutls26-2.4.1-24.39.51.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
                "product": {
                  "name": "libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
                  "product_id": "libgnutls26-32bit-2.4.1-24.39.51.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libgnutls-devel-2.4.1-24.39.51.1.x86_64",
                "product": {
                  "name": "libgnutls-devel-2.4.1-24.39.51.1.x86_64",
                  "product_id": "libgnutls-devel-2.4.1-24.39.51.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64",
                "product": {
                  "name": "libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64",
                  "product_id": "libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
                "product": {
                  "name": "libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
                  "product_id": "libgnutls-extra26-2.4.1-24.39.51.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "gnutls-2.4.1-24.39.51.1.x86_64",
                "product": {
                  "name": "gnutls-2.4.1-24.39.51.1.x86_64",
                  "product_id": "gnutls-2.4.1-24.39.51.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls26-2.4.1-24.39.51.1.x86_64",
                "product": {
                  "name": "libgnutls26-2.4.1-24.39.51.1.x86_64",
                  "product_id": "libgnutls26-2.4.1-24.39.51.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
                "product": {
                  "name": "libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
                  "product_id": "libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 11 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 11 SP3",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:suse:sle-sdk:11:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 11 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 11 SP3",
                  "product_id": "SUSE Linux Enterprise Desktop 11 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sled:11:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Availability Extension 11 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise High Availability Extension 11 SP3",
                  "product_id": "SUSE Linux Enterprise High Availability Extension 11 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:suse:sle-hae:11:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager 1.7",
                "product": {
                  "name": "SUSE Manager 1.7",
                  "product_id": "SUSE Manager 1.7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-server:1.7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP3",
                  "product_id": "SUSE Linux Enterprise Server 11 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles:11:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                  "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:11:sp3:teradata"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:11:sp3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-2.4.1-24.39.51.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.i586"
        },
        "product_reference": "libgnutls-devel-2.4.1-24.39.51.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-2.4.1-24.39.51.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ia64"
        },
        "product_reference": "libgnutls-devel-2.4.1-24.39.51.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-2.4.1-24.39.51.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ppc64"
        },
        "product_reference": "libgnutls-devel-2.4.1-24.39.51.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-2.4.1-24.39.51.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.s390x"
        },
        "product_reference": "libgnutls-devel-2.4.1-24.39.51.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "libgnutls-devel-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra-devel-2.4.1-24.39.51.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.i586"
        },
        "product_reference": "libgnutls-extra-devel-2.4.1-24.39.51.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra-devel-2.4.1-24.39.51.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ia64"
        },
        "product_reference": "libgnutls-extra-devel-2.4.1-24.39.51.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64"
        },
        "product_reference": "libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra-devel-2.4.1-24.39.51.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.s390x"
        },
        "product_reference": "libgnutls-extra-devel-2.4.1-24.39.51.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-2.4.1-24.39.51.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.i586"
        },
        "product_reference": "gnutls-2.4.1-24.39.51.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "gnutls-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-2.4.1-24.39.51.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586"
        },
        "product_reference": "libgnutls26-2.4.1-24.39.51.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "libgnutls26-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-32bit-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.i586 as component of SUSE Linux Enterprise High Availability Extension 11 SP3",
          "product_id": "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.ia64 as component of SUSE Linux Enterprise High Availability Extension 11 SP3",
          "product_id": "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.ppc64 as component of SUSE Linux Enterprise High Availability Extension 11 SP3",
          "product_id": "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.s390x as component of SUSE Linux Enterprise High Availability Extension 11 SP3",
          "product_id": "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 11 SP3",
          "product_id": "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-2.4.1-24.39.51.1.x86_64 as component of SUSE Manager 1.7",
          "product_id": "SUSE Manager 1.7:gnutls-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "gnutls-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Manager 1.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.x86_64 as component of SUSE Manager 1.7",
          "product_id": "SUSE Manager 1.7:libgnutls-extra26-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Manager 1.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-2.4.1-24.39.51.1.x86_64 as component of SUSE Manager 1.7",
          "product_id": "SUSE Manager 1.7:libgnutls26-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "libgnutls26-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Manager 1.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-32bit-2.4.1-24.39.51.1.x86_64 as component of SUSE Manager 1.7",
          "product_id": "SUSE Manager 1.7:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Manager 1.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-2.4.1-24.39.51.1.i586 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.i586"
        },
        "product_reference": "gnutls-2.4.1-24.39.51.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-2.4.1-24.39.51.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ia64"
        },
        "product_reference": "gnutls-2.4.1-24.39.51.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-2.4.1-24.39.51.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64"
        },
        "product_reference": "gnutls-2.4.1-24.39.51.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-2.4.1-24.39.51.1.s390x as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.s390x"
        },
        "product_reference": "gnutls-2.4.1-24.39.51.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "gnutls-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.i586 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.s390x as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-2.4.1-24.39.51.1.i586 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586"
        },
        "product_reference": "libgnutls26-2.4.1-24.39.51.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-2.4.1-24.39.51.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64"
        },
        "product_reference": "libgnutls26-2.4.1-24.39.51.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-2.4.1-24.39.51.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64"
        },
        "product_reference": "libgnutls26-2.4.1-24.39.51.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-2.4.1-24.39.51.1.s390x as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x"
        },
        "product_reference": "libgnutls26-2.4.1-24.39.51.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "libgnutls26-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-32bit-2.4.1-24.39.51.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64"
        },
        "product_reference": "libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-32bit-2.4.1-24.39.51.1.s390x as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x"
        },
        "product_reference": "libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-32bit-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-x86-2.4.1-24.39.51.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64"
        },
        "product_reference": "libgnutls26-x86-2.4.1-24.39.51.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-2.4.1-24.39.51.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.i586"
        },
        "product_reference": "gnutls-2.4.1-24.39.51.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-2.4.1-24.39.51.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ia64"
        },
        "product_reference": "gnutls-2.4.1-24.39.51.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-2.4.1-24.39.51.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ppc64"
        },
        "product_reference": "gnutls-2.4.1-24.39.51.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-2.4.1-24.39.51.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.s390x"
        },
        "product_reference": "gnutls-2.4.1-24.39.51.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "gnutls-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.i586"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ia64"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ppc64"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.s390x"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-2.4.1-24.39.51.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.i586"
        },
        "product_reference": "libgnutls26-2.4.1-24.39.51.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-2.4.1-24.39.51.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ia64"
        },
        "product_reference": "libgnutls26-2.4.1-24.39.51.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-2.4.1-24.39.51.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ppc64"
        },
        "product_reference": "libgnutls26-2.4.1-24.39.51.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-2.4.1-24.39.51.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.s390x"
        },
        "product_reference": "libgnutls26-2.4.1-24.39.51.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "libgnutls26-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-32bit-2.4.1-24.39.51.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64"
        },
        "product_reference": "libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-32bit-2.4.1-24.39.51.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.s390x"
        },
        "product_reference": "libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-32bit-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-x86-2.4.1-24.39.51.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-x86-2.4.1-24.39.51.1.ia64"
        },
        "product_reference": "libgnutls26-x86-2.4.1-24.39.51.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-2.4.1-24.39.51.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.i586"
        },
        "product_reference": "gnutls-2.4.1-24.39.51.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-2.4.1-24.39.51.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ia64"
        },
        "product_reference": "gnutls-2.4.1-24.39.51.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-2.4.1-24.39.51.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64"
        },
        "product_reference": "gnutls-2.4.1-24.39.51.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-2.4.1-24.39.51.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.s390x"
        },
        "product_reference": "gnutls-2.4.1-24.39.51.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "gnutls-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-extra26-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-2.4.1-24.39.51.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586"
        },
        "product_reference": "libgnutls26-2.4.1-24.39.51.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-2.4.1-24.39.51.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64"
        },
        "product_reference": "libgnutls26-2.4.1-24.39.51.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-2.4.1-24.39.51.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64"
        },
        "product_reference": "libgnutls26-2.4.1-24.39.51.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-2.4.1-24.39.51.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x"
        },
        "product_reference": "libgnutls26-2.4.1-24.39.51.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "libgnutls26-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-32bit-2.4.1-24.39.51.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64"
        },
        "product_reference": "libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-32bit-2.4.1-24.39.51.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x"
        },
        "product_reference": "libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-32bit-2.4.1-24.39.51.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
        },
        "product_reference": "libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls26-x86-2.4.1-24.39.51.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64"
        },
        "product_reference": "libgnutls26-x86-2.4.1-24.39.51.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2009-5138",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2009-5138"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates, a different vulnerability than CVE-2014-1959.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2009-5138",
          "url": "https://www.suse.com/security/cve/CVE-2009-5138"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 865993 for CVE-2009-5138",
          "url": "https://bugzilla.suse.com/865993"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-06-03T20:02:07Z",
          "details": "important"
        }
      ],
      "title": "CVE-2009-5138"
    },
    {
      "cve": "CVE-2013-2116",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2013-2116"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote attackers to cause a denial of service (buffer over-read and crash) via a crafted padding length.  NOTE: this might be due to an incorrect fix for CVE-2013-0169.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2013-2116",
          "url": "https://www.suse.com/security/cve/CVE-2013-2116"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 821818 for CVE-2013-2116",
          "url": "https://bugzilla.suse.com/821818"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-06-03T20:02:07Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2013-2116"
    },
    {
      "cve": "CVE-2014-0092",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-0092"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-0092",
          "url": "https://www.suse.com/security/cve/CVE-2014-0092"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 865804 for CVE-2014-0092",
          "url": "https://bugzilla.suse.com/865804"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 915878 for CVE-2014-0092",
          "url": "https://bugzilla.suse.com/915878"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-06-03T20:02:07Z",
          "details": "important"
        }
      ],
      "title": "CVE-2014-0092"
    },
    {
      "cve": "CVE-2014-3466",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3466"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3466",
          "url": "https://www.suse.com/security/cve/CVE-2014-3466"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 880730 for CVE-2014-3466",
          "url": "https://bugzilla.suse.com/880730"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-06-03T20:02:07Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3466"
    },
    {
      "cve": "CVE-2014-8155",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8155"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-middle attackers to spoof servers via a certificate issued by a CA certificate that is (1) not yet valid or (2) no longer valid.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8155",
          "url": "https://www.suse.com/security/cve/CVE-2014-8155"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 920366 for CVE-2014-8155",
          "url": "https://bugzilla.suse.com/920366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-06-03T20:02:07Z",
          "details": "important"
        }
      ],
      "title": "CVE-2014-8155"
    },
    {
      "cve": "CVE-2015-0282",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0282"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0282",
          "url": "https://www.suse.com/security/cve/CVE-2015-0282"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 919938 for CVE-2015-0282",
          "url": "https://bugzilla.suse.com/919938"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 921684 for CVE-2015-0282",
          "url": "https://bugzilla.suse.com/921684"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-06-03T20:02:07Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-0282"
    },
    {
      "cve": "CVE-2015-0294",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0294"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:gnutls-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls26-2.4.1-24.39.51.1.x86_64",
          "SUSE Manager 1.7:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0294",
          "url": "https://www.suse.com/security/cve/CVE-2015-0294"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 919938 for CVE-2015-0294",
          "url": "https://bugzilla.suse.com/919938"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise High Availability Extension 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libgnutls26-x86-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-devel-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra-devel-2.4.1-24.39.51.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:gnutls-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls-extra26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls26-2.4.1-24.39.51.1.x86_64",
            "SUSE Manager 1.7:libgnutls26-32bit-2.4.1-24.39.51.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-06-03T20:02:07Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-0294"
    }
  ]
}

CVE-2009-5138 (GCVE-0-2009-5138)

Vulnerability from cvelistv5 – Published: 2014-03-06 18:00 – Updated: 2024-08-07 07:32

Summary

GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates, a different vulnerability than CVE-2014-1959.

Severity ?

No CVSS data available.

CWE

n/a

Assigner

redhat

References

URL

Tags

	http://secunia.com/advisories/57321	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/57260	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/57274	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://article.gmane.org/gmane.comp.security.oss.…	mailing-listx_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2014-0247.html	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://thread.gmane.org/gmane.comp.encryption.gpg…	mailing-listx_refsource_MLIST
	https://gitorious.org/gnutls/gnutls/commit/c8dcbe…	x_refsource_CONFIRM
	http://secunia.com/advisories/57254	third-party-advisoryx_refsource_SECUNIA
	https://bugzilla.redhat.com/show_bug.cgi?id=1069301	x_refsource_CONFIRM
	http://thread.gmane.org/gmane.comp.security.oss.g…	mailing-listx_refsource_MLIST

Date Public ?

2009-01-09 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:32:22.389Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "57321",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57321"
          },
          {
            "name": "57260",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57260"
          },
          {
            "name": "SUSE-SU-2014:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00020.html"
          },
          {
            "name": "57274",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57274"
          },
          {
            "name": "SUSE-SU-2014:0319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00000.html"
          },
          {
            "name": "[oss-security] 20140225 Re: Re: CVE Request - GnuTLS corrects flaw in certificate verification (3.1.x/3.2.x)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://article.gmane.org/gmane.comp.security.oss.general/12223"
          },
          {
            "name": "RHSA-2014:0247",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0247.html"
          },
          {
            "name": "SUSE-SU-2014:0320",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html"
          },
          {
            "name": "SUSE-SU-2014:0322",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00003.html"
          },
          {
            "name": "[gnutls-devel] 20090109 Re: gnutls fails to use Verisign CA cert without a Basic Constraint",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3351/focus=3361"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://gitorious.org/gnutls/gnutls/commit/c8dcbedd1fdc312f5b1a70fcfbc1afe235d800cd"
          },
          {
            "name": "57254",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57254"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1069301"
          },
          {
            "name": "[oss-security] 20140227 Re: CVE Request - GnuTLS corrects flaw in certificate verification (3.1.x/3.2.x)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://thread.gmane.org/gmane.comp.security.oss.general/12127"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-01-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates, a different vulnerability than CVE-2014-1959."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2014-03-27T15:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "57321",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57321"
        },
        {
          "name": "57260",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57260"
        },
        {
          "name": "SUSE-SU-2014:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00020.html"
        },
        {
          "name": "57274",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57274"
        },
        {
          "name": "SUSE-SU-2014:0319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00000.html"
        },
        {
          "name": "[oss-security] 20140225 Re: Re: CVE Request - GnuTLS corrects flaw in certificate verification (3.1.x/3.2.x)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://article.gmane.org/gmane.comp.security.oss.general/12223"
        },
        {
          "name": "RHSA-2014:0247",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0247.html"
        },
        {
          "name": "SUSE-SU-2014:0320",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html"
        },
        {
          "name": "SUSE-SU-2014:0322",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00003.html"
        },
        {
          "name": "[gnutls-devel] 20090109 Re: gnutls fails to use Verisign CA cert without a Basic Constraint",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3351/focus=3361"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://gitorious.org/gnutls/gnutls/commit/c8dcbedd1fdc312f5b1a70fcfbc1afe235d800cd"
        },
        {
          "name": "57254",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57254"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1069301"
        },
        {
          "name": "[oss-security] 20140227 Re: CVE Request - GnuTLS corrects flaw in certificate verification (3.1.x/3.2.x)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://thread.gmane.org/gmane.comp.security.oss.general/12127"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2009-5138",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates, a different vulnerability than CVE-2014-1959."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "57321",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57321"
            },
            {
              "name": "57260",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57260"
            },
            {
              "name": "SUSE-SU-2014:0445",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00020.html"
            },
            {
              "name": "57274",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57274"
            },
            {
              "name": "SUSE-SU-2014:0319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00000.html"
            },
            {
              "name": "[oss-security] 20140225 Re: Re: CVE Request - GnuTLS corrects flaw in certificate verification (3.1.x/3.2.x)",
              "refsource": "MLIST",
              "url": "http://article.gmane.org/gmane.comp.security.oss.general/12223"
            },
            {
              "name": "RHSA-2014:0247",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0247.html"
            },
            {
              "name": "SUSE-SU-2014:0320",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html"
            },
            {
              "name": "SUSE-SU-2014:0322",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00003.html"
            },
            {
              "name": "[gnutls-devel] 20090109 Re: gnutls fails to use Verisign CA cert without a Basic Constraint",
              "refsource": "MLIST",
              "url": "http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3351/focus=3361"
            },
            {
              "name": "https://gitorious.org/gnutls/gnutls/commit/c8dcbedd1fdc312f5b1a70fcfbc1afe235d800cd",
              "refsource": "CONFIRM",
              "url": "https://gitorious.org/gnutls/gnutls/commit/c8dcbedd1fdc312f5b1a70fcfbc1afe235d800cd"
            },
            {
              "name": "57254",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57254"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1069301",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1069301"
            },
            {
              "name": "[oss-security] 20140227 Re: CVE Request - GnuTLS corrects flaw in certificate verification (3.1.x/3.2.x)",
              "refsource": "MLIST",
              "url": "http://thread.gmane.org/gmane.comp.security.oss.general/12127"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-5138",
    "datePublished": "2014-03-06T18:00:00.000Z",
    "dateReserved": "2014-02-26T00:00:00.000Z",
    "dateUpdated": "2024-08-07T07:32:22.389Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-0092 (GCVE-0-2014-0092)

Vulnerability from cvelistv5 – Published: 2014-03-06 18:00 – Updated: 2024-08-06 09:05

Summary

lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.

Severity ?

No CVSS data available.

CWE

n/a

Assigner

redhat

References

URL

Tags

	http://secunia.com/advisories/57321	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/57260	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2014-0288.html	vendor-advisoryx_refsource_REDHAT
	http://gnutls.org/security.html#GNUTLS-SA-2014-2	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/57274	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2014-0247.html	vendor-advisoryx_refsource_REDHAT
	http://www.securityfocus.com/bid/65919	vdb-entryx_refsource_BID
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/57254	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2014-0339.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/56933	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2014-0246.html	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=1069865	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2127-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/57204	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/57103	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.debian.org/security/2014/dsa-2869	vendor-advisoryx_refsource_DEBIAN

Date Public ?

2014-03-03 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:05:38.662Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "57321",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57321"
          },
          {
            "name": "57260",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57260"
          },
          {
            "name": "RHSA-2014:0288",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0288.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://gnutls.org/security.html#GNUTLS-SA-2014-2"
          },
          {
            "name": "SUSE-SU-2014:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00020.html"
          },
          {
            "name": "57274",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57274"
          },
          {
            "name": "SUSE-SU-2014:0319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00000.html"
          },
          {
            "name": "RHSA-2014:0247",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0247.html"
          },
          {
            "name": "65919",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/65919"
          },
          {
            "name": "SUSE-SU-2014:0320",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html"
          },
          {
            "name": "SUSE-SU-2014:0322",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00003.html"
          },
          {
            "name": "SUSE-SU-2014:0324",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00005.html"
          },
          {
            "name": "57254",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57254"
          },
          {
            "name": "RHSA-2014:0339",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0339.html"
          },
          {
            "name": "56933",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56933"
          },
          {
            "name": "SUSE-SU-2014:0323",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00004.html"
          },
          {
            "name": "RHSA-2014:0246",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0246.html"
          },
          {
            "name": "SUSE-SU-2014:0321",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1069865"
          },
          {
            "name": "USN-2127-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2127-1"
          },
          {
            "name": "57204",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57204"
          },
          {
            "name": "openSUSE-SU-2014:0346",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00009.html"
          },
          {
            "name": "57103",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57103"
          },
          {
            "name": "openSUSE-SU-2014:0328",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00007.html"
          },
          {
            "name": "openSUSE-SU-2014:0325",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00006.html"
          },
          {
            "name": "DSA-2869",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2869"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "57321",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57321"
        },
        {
          "name": "57260",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57260"
        },
        {
          "name": "RHSA-2014:0288",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0288.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://gnutls.org/security.html#GNUTLS-SA-2014-2"
        },
        {
          "name": "SUSE-SU-2014:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00020.html"
        },
        {
          "name": "57274",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57274"
        },
        {
          "name": "SUSE-SU-2014:0319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00000.html"
        },
        {
          "name": "RHSA-2014:0247",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0247.html"
        },
        {
          "name": "65919",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/65919"
        },
        {
          "name": "SUSE-SU-2014:0320",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html"
        },
        {
          "name": "SUSE-SU-2014:0322",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00003.html"
        },
        {
          "name": "SUSE-SU-2014:0324",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00005.html"
        },
        {
          "name": "57254",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57254"
        },
        {
          "name": "RHSA-2014:0339",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0339.html"
        },
        {
          "name": "56933",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56933"
        },
        {
          "name": "SUSE-SU-2014:0323",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00004.html"
        },
        {
          "name": "RHSA-2014:0246",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0246.html"
        },
        {
          "name": "SUSE-SU-2014:0321",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1069865"
        },
        {
          "name": "USN-2127-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2127-1"
        },
        {
          "name": "57204",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57204"
        },
        {
          "name": "openSUSE-SU-2014:0346",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00009.html"
        },
        {
          "name": "57103",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57103"
        },
        {
          "name": "openSUSE-SU-2014:0328",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00007.html"
        },
        {
          "name": "openSUSE-SU-2014:0325",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00006.html"
        },
        {
          "name": "DSA-2869",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2869"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-0092",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "57321",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57321"
            },
            {
              "name": "57260",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57260"
            },
            {
              "name": "RHSA-2014:0288",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0288.html"
            },
            {
              "name": "http://gnutls.org/security.html#GNUTLS-SA-2014-2",
              "refsource": "CONFIRM",
              "url": "http://gnutls.org/security.html#GNUTLS-SA-2014-2"
            },
            {
              "name": "SUSE-SU-2014:0445",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00020.html"
            },
            {
              "name": "57274",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57274"
            },
            {
              "name": "SUSE-SU-2014:0319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00000.html"
            },
            {
              "name": "RHSA-2014:0247",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0247.html"
            },
            {
              "name": "65919",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/65919"
            },
            {
              "name": "SUSE-SU-2014:0320",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html"
            },
            {
              "name": "SUSE-SU-2014:0322",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00003.html"
            },
            {
              "name": "SUSE-SU-2014:0324",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00005.html"
            },
            {
              "name": "57254",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57254"
            },
            {
              "name": "RHSA-2014:0339",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0339.html"
            },
            {
              "name": "56933",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56933"
            },
            {
              "name": "SUSE-SU-2014:0323",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00004.html"
            },
            {
              "name": "RHSA-2014:0246",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0246.html"
            },
            {
              "name": "SUSE-SU-2014:0321",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00002.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1069865",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1069865"
            },
            {
              "name": "USN-2127-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2127-1"
            },
            {
              "name": "57204",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57204"
            },
            {
              "name": "openSUSE-SU-2014:0346",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00009.html"
            },
            {
              "name": "57103",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57103"
            },
            {
              "name": "openSUSE-SU-2014:0328",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00007.html"
            },
            {
              "name": "openSUSE-SU-2014:0325",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00006.html"
            },
            {
              "name": "DSA-2869",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2869"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-0092",
    "datePublished": "2014-03-06T18:00:00.000Z",
    "dateReserved": "2013-12-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T09:05:38.662Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-0282 (GCVE-0-2015-0282)

Vulnerability from cvelistv5 – Published: 2015-03-24 17:00 – Updated: 2024-08-06 04:03

Summary

GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

Severity ?

No CVSS data available.

CWE

n/a

Assigner

redhat

References

URL

Tags

	http://www.gnutls.org/security.html	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3191	vendor-advisoryx_refsource_DEBIAN
	http://www.securityfocus.com/bid/73119	vdb-entryx_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2015-1457.html	vendor-advisoryx_refsource_REDHAT
	http://www.securitytracker.com/id/1032148	vdb-entryx_refsource_SECTRACK

Date Public ?

2015-03-15 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:03:10.835Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.gnutls.org/security.html"
          },
          {
            "name": "DSA-3191",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3191"
          },
          {
            "name": "73119",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/73119"
          },
          {
            "name": "RHSA-2015:1457",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1457.html"
          },
          {
            "name": "1032148",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032148"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-03-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.gnutls.org/security.html"
        },
        {
          "name": "DSA-3191",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3191"
        },
        {
          "name": "73119",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/73119"
        },
        {
          "name": "RHSA-2015:1457",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1457.html"
        },
        {
          "name": "1032148",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032148"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-0282",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.gnutls.org/security.html",
              "refsource": "CONFIRM",
              "url": "http://www.gnutls.org/security.html"
            },
            {
              "name": "DSA-3191",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3191"
            },
            {
              "name": "73119",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/73119"
            },
            {
              "name": "RHSA-2015:1457",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1457.html"
            },
            {
              "name": "1032148",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032148"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-0282",
    "datePublished": "2015-03-24T17:00:00.000Z",
    "dateReserved": "2014-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-06T04:03:10.835Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-0294 (GCVE-0-2015-0294)

Vulnerability from cvelistv5 – Published: 2020-01-27 15:12 – Updated: 2024-08-06 04:03

Summary

GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate.

Severity ?

No CVSS data available.

CWE

Cryptography

Assigner

redhat

References

URL

Tags

	https://bugzilla.redhat.com/show_bug.cgi?id=1196323	x_refsource_MISC
	https://gitlab.com/gnutls/gnutls/commit/6e76e9b9f…	x_refsource_MISC
	http://www.debian.org/security/2015/dsa-3191	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	GnuTLS	GnuTLS	Affected: before 3.3.13

Date Public ?

2015-03-15 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:03:10.950Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1196323"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://gitlab.com/gnutls/gnutls/commit/6e76e9b9fa845b76b0b9a45f05f4b54a052578ff"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3191"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "GnuTLS",
          "vendor": "GnuTLS",
          "versions": [
            {
              "status": "affected",
              "version": "before 3.3.13"
            }
          ]
        }
      ],
      "datePublic": "2015-03-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Cryptography",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-01-27T15:12:11.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1196323"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.com/gnutls/gnutls/commit/6e76e9b9fa845b76b0b9a45f05f4b54a052578ff"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3191"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-0294",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "GnuTLS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 3.3.13"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "GnuTLS"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Cryptography"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1196323",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1196323"
            },
            {
              "name": "https://gitlab.com/gnutls/gnutls/commit/6e76e9b9fa845b76b0b9a45f05f4b54a052578ff",
              "refsource": "MISC",
              "url": "https://gitlab.com/gnutls/gnutls/commit/6e76e9b9fa845b76b0b9a45f05f4b54a052578ff"
            },
            {
              "name": "http://www.debian.org/security/2015/dsa-3191",
              "refsource": "MISC",
              "url": "http://www.debian.org/security/2015/dsa-3191"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-0294",
    "datePublished": "2020-01-27T15:12:11.000Z",
    "dateReserved": "2014-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-06T04:03:10.950Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-2116 (GCVE-0-2013-2116)

Vulnerability from cvelistv5 – Published: 2013-07-03 18:00 – Updated: 2024-08-06 15:27

Summary

The _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote attackers to cause a denial of service (buffer over-read and crash) via a crafted padding length. NOTE: this might be due to an incorrect fix for CVE-2013-0169.

Severity ?

No CVSS data available.

CWE

n/a

Assigner

redhat

References

URL

Tags

	http://secunia.com/advisories/57260	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/57274	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://rhn.redhat.com/errata/RHSA-2013-0883.html	vendor-advisoryx_refsource_REDHAT
	http://www.debian.org/security/2013/dsa-2697	vendor-advisoryx_refsource_DEBIAN
	http://thread.gmane.org/gmane.comp.encryption.gpg…	x_refsource_CONFIRM
	http://www.gnutls.org/security.html#GNUTLS-SA-2013-2	x_refsource_CONFIRM
	http://secunia.com/advisories/53911	third-party-advisoryx_refsource_SECUNIA
	https://gitorious.org/gnutls/gnutls/commit/5164d5…	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1843-1	vendor-advisoryx_refsource_UBUNTU
	http://www.securitytracker.com/id/1028603	vdb-entryx_refsource_SECTRACK
	http://thread.gmane.org/gmane.comp.encryption.gpg…	x_refsource_MISC

Date Public ?

2013-05-22 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:27:40.995Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "57260",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57260"
          },
          {
            "name": "SUSE-SU-2013:1060",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00019.html"
          },
          {
            "name": "57274",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57274"
          },
          {
            "name": "SUSE-SU-2014:0320",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html"
          },
          {
            "name": "SUSE-SU-2014:0322",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00003.html"
          },
          {
            "name": "MDVSA-2013:171",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:171"
          },
          {
            "name": "RHSA-2013:0883",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0883.html"
          },
          {
            "name": "DSA-2697",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2013/dsa-2697"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/6754"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.gnutls.org/security.html#GNUTLS-SA-2013-2"
          },
          {
            "name": "53911",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/53911"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://gitorious.org/gnutls/gnutls/commit/5164d5a1d57cd0372a5dd074382ca960ca18b27d"
          },
          {
            "name": "USN-1843-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1843-1"
          },
          {
            "name": "1028603",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1028603"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/6753"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-05-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote attackers to cause a denial of service (buffer over-read and crash) via a crafted padding length.  NOTE: this might be due to an incorrect fix for CVE-2013-0169."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2014-03-18T11:57:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "57260",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57260"
        },
        {
          "name": "SUSE-SU-2013:1060",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00019.html"
        },
        {
          "name": "57274",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57274"
        },
        {
          "name": "SUSE-SU-2014:0320",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html"
        },
        {
          "name": "SUSE-SU-2014:0322",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00003.html"
        },
        {
          "name": "MDVSA-2013:171",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:171"
        },
        {
          "name": "RHSA-2013:0883",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0883.html"
        },
        {
          "name": "DSA-2697",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2013/dsa-2697"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/6754"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.gnutls.org/security.html#GNUTLS-SA-2013-2"
        },
        {
          "name": "53911",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/53911"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://gitorious.org/gnutls/gnutls/commit/5164d5a1d57cd0372a5dd074382ca960ca18b27d"
        },
        {
          "name": "USN-1843-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1843-1"
        },
        {
          "name": "1028603",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1028603"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/6753"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2013-2116",
    "datePublished": "2013-07-03T18:00:00.000Z",
    "dateReserved": "2013-02-19T00:00:00.000Z",
    "dateUpdated": "2024-08-06T15:27:40.995Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-8155 (GCVE-0-2014-8155)

Vulnerability from cvelistv5 – Published: 2015-08-14 18:00 – Updated: 2024-08-06 13:10

Summary

GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-middle attackers to spoof servers via a certificate issued by a CA certificate that is (1) not yet valid or (2) no longer valid.

Severity ?

No CVSS data available.

CWE

n/a

Assigner

redhat

References

URL

Tags

	http://www.securityfocus.com/bid/73317	vdb-entryx_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2015-1457.html	vendor-advisoryx_refsource_REDHAT
	https://gitlab.com/gnutls/gnutls/commit/897cbce62…	x_refsource_CONFIRM
	https://support.f5.com/csp/article/K53330207	x_refsource_CONFIRM

Date Public ?

2010-03-14 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:10:50.869Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "73317",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/73317"
          },
          {
            "name": "RHSA-2015:1457",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1457.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://gitlab.com/gnutls/gnutls/commit/897cbce62c0263a498088ac3e465aa5f05f8719c"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K53330207"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-03-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-middle attackers to spoof servers via a certificate issued by a CA certificate that is (1) not yet valid or (2) no longer valid."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-04-08T21:06:04.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "73317",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/73317"
        },
        {
          "name": "RHSA-2015:1457",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1457.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://gitlab.com/gnutls/gnutls/commit/897cbce62c0263a498088ac3e465aa5f05f8719c"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K53330207"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-8155",
    "datePublished": "2015-08-14T18:00:00.000Z",
    "dateReserved": "2014-10-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:10:50.869Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3466 (GCVE-0-2014-3466)

Vulnerability from cvelistv5 – Published: 2014-06-03 14:00 – Updated: 2024-08-06 10:43

Summary

Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message.

Severity ?

No CVSS data available.

CWE

n/a

Assigner

redhat

References

URL

Tags

	http://www.gnutls.org/security.html	x_refsource_CONFIRM
	http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
	http://www.debian.org/security/2014/dsa-2944	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/58340	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2014-0595.html	vendor-advisoryx_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2229-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/58642	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/bid/67741	vdb-entryx_refsource_BID
	http://www.novell.com/support/kb/doc.php?id=7015302	x_refsource_CONFIRM
	http://secunia.com/advisories/59057	third-party-advisoryx_refsource_SECUNIA
	http://linux.oracle.com/errata/ELSA-2014-0595.html	x_refsource_CONFIRM
	http://secunia.com/advisories/59086	third-party-advisoryx_refsource_SECUNIA
	https://bugzilla.redhat.com/show_bug.cgi?id=1101932	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2014-0684.html	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/59021	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2014-0815.html	vendor-advisoryx_refsource_REDHAT
	http://radare.today/technical-analysis-of-the-gnu…	x_refsource_MISC
	http://www.novell.com/support/kb/doc.php?id=7015303	x_refsource_CONFIRM
	http://linux.oracle.com/errata/ELSA-2014-0594.html	x_refsource_CONFIRM
	http://secunia.com/advisories/58598	third-party-advisoryx_refsource_SECUNIA
	http://www-947.ibm.com/support/entry/portal/docdi…	x_refsource_CONFIRM
	http://secunia.com/advisories/59838	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/60384	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2014-0594.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/59016	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/58601	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/59408	third-party-advisoryx_refsource_SECUNIA
	https://www.gitorious.org/gnutls/gnutls/commit/68…	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1030314	vdb-entryx_refsource_SECTRACK

Date Public ?

2014-05-29 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:43:06.197Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.gnutls.org/security.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21678776"
          },
          {
            "name": "DSA-2944",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2944"
          },
          {
            "name": "58340",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/58340"
          },
          {
            "name": "RHSA-2014:0595",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0595.html"
          },
          {
            "name": "USN-2229-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2229-1"
          },
          {
            "name": "58642",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/58642"
          },
          {
            "name": "67741",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/67741"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.novell.com/support/kb/doc.php?id=7015302"
          },
          {
            "name": "59057",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59057"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-0595.html"
          },
          {
            "name": "59086",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59086"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1101932"
          },
          {
            "name": "SUSE-SU-2014:0758",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00002.html"
          },
          {
            "name": "RHSA-2014:0684",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0684.html"
          },
          {
            "name": "openSUSE-SU-2014:0763",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00007.html"
          },
          {
            "name": "59021",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59021"
          },
          {
            "name": "RHSA-2014:0815",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0815.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://radare.today/technical-analysis-of-the-gnutls-hello-vulnerability/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.novell.com/support/kb/doc.php?id=7015303"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.oracle.com/errata/ELSA-2014-0594.html"
          },
          {
            "name": "58598",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/58598"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096155"
          },
          {
            "name": "59838",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59838"
          },
          {
            "name": "SUSE-SU-2014:0788",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00015.html"
          },
          {
            "name": "60384",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60384"
          },
          {
            "name": "RHSA-2014:0594",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0594.html"
          },
          {
            "name": "59016",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59016"
          },
          {
            "name": "openSUSE-SU-2014:0767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00010.html"
          },
          {
            "name": "58601",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/58601"
          },
          {
            "name": "59408",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59408"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.gitorious.org/gnutls/gnutls/commit/688ea6428a432c39203d00acd1af0e7684e5ddfd"
          },
          {
            "name": "1030314",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1030314"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-05-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.gnutls.org/security.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21678776"
        },
        {
          "name": "DSA-2944",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2944"
        },
        {
          "name": "58340",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/58340"
        },
        {
          "name": "RHSA-2014:0595",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0595.html"
        },
        {
          "name": "USN-2229-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2229-1"
        },
        {
          "name": "58642",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/58642"
        },
        {
          "name": "67741",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/67741"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.novell.com/support/kb/doc.php?id=7015302"
        },
        {
          "name": "59057",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59057"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-0595.html"
        },
        {
          "name": "59086",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59086"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1101932"
        },
        {
          "name": "SUSE-SU-2014:0758",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00002.html"
        },
        {
          "name": "RHSA-2014:0684",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0684.html"
        },
        {
          "name": "openSUSE-SU-2014:0763",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00007.html"
        },
        {
          "name": "59021",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59021"
        },
        {
          "name": "RHSA-2014:0815",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0815.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://radare.today/technical-analysis-of-the-gnutls-hello-vulnerability/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.novell.com/support/kb/doc.php?id=7015303"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.oracle.com/errata/ELSA-2014-0594.html"
        },
        {
          "name": "58598",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/58598"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096155"
        },
        {
          "name": "59838",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59838"
        },
        {
          "name": "SUSE-SU-2014:0788",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00015.html"
        },
        {
          "name": "60384",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60384"
        },
        {
          "name": "RHSA-2014:0594",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0594.html"
        },
        {
          "name": "59016",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59016"
        },
        {
          "name": "openSUSE-SU-2014:0767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00010.html"
        },
        {
          "name": "58601",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/58601"
        },
        {
          "name": "59408",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59408"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.gitorious.org/gnutls/gnutls/commit/688ea6428a432c39203d00acd1af0e7684e5ddfd"
        },
        {
          "name": "1030314",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1030314"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-3466",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.gnutls.org/security.html",
              "refsource": "CONFIRM",
              "url": "http://www.gnutls.org/security.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21678776",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21678776"
            },
            {
              "name": "DSA-2944",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2944"
            },
            {
              "name": "58340",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/58340"
            },
            {
              "name": "RHSA-2014:0595",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0595.html"
            },
            {
              "name": "USN-2229-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2229-1"
            },
            {
              "name": "58642",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/58642"
            },
            {
              "name": "67741",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/67741"
            },
            {
              "name": "http://www.novell.com/support/kb/doc.php?id=7015302",
              "refsource": "CONFIRM",
              "url": "http://www.novell.com/support/kb/doc.php?id=7015302"
            },
            {
              "name": "59057",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59057"
            },
            {
              "name": "http://linux.oracle.com/errata/ELSA-2014-0595.html",
              "refsource": "CONFIRM",
              "url": "http://linux.oracle.com/errata/ELSA-2014-0595.html"
            },
            {
              "name": "59086",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59086"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1101932",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1101932"
            },
            {
              "name": "SUSE-SU-2014:0758",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00002.html"
            },
            {
              "name": "RHSA-2014:0684",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0684.html"
            },
            {
              "name": "openSUSE-SU-2014:0763",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00007.html"
            },
            {
              "name": "59021",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59021"
            },
            {
              "name": "RHSA-2014:0815",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0815.html"
            },
            {
              "name": "http://radare.today/technical-analysis-of-the-gnutls-hello-vulnerability/",
              "refsource": "MISC",
              "url": "http://radare.today/technical-analysis-of-the-gnutls-hello-vulnerability/"
            },
            {
              "name": "http://www.novell.com/support/kb/doc.php?id=7015303",
              "refsource": "CONFIRM",
              "url": "http://www.novell.com/support/kb/doc.php?id=7015303"
            },
            {
              "name": "http://linux.oracle.com/errata/ELSA-2014-0594.html",
              "refsource": "CONFIRM",
              "url": "http://linux.oracle.com/errata/ELSA-2014-0594.html"
            },
            {
              "name": "58598",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/58598"
            },
            {
              "name": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096155",
              "refsource": "CONFIRM",
              "url": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096155"
            },
            {
              "name": "59838",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59838"
            },
            {
              "name": "SUSE-SU-2014:0788",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00015.html"
            },
            {
              "name": "60384",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/60384"
            },
            {
              "name": "RHSA-2014:0594",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0594.html"
            },
            {
              "name": "59016",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59016"
            },
            {
              "name": "openSUSE-SU-2014:0767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00010.html"
            },
            {
              "name": "58601",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/58601"
            },
            {
              "name": "59408",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59408"
            },
            {
              "name": "https://www.gitorious.org/gnutls/gnutls/commit/688ea6428a432c39203d00acd1af0e7684e5ddfd",
              "refsource": "CONFIRM",
              "url": "https://www.gitorious.org/gnutls/gnutls/commit/688ea6428a432c39203d00acd1af0e7684e5ddfd"
            },
            {
              "name": "1030314",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1030314"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3466",
    "datePublished": "2014-06-03T14:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:43:06.197Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.