SUSE Package Hub - openSUSE-2020-305

Update Info

openSUSE-2020-305

Security update for openfortivpn

Type: security

Severity: important

Issued: 2020-03-05

Description:

This update for openfortivpn to version 1.12.0 fixes the following issues:

- CVE-2020-7043: Fixed a TLS Certificate CommonName NULL Byte Vulnerability (boo#1165301).
- CVE-2020-7042: Fixed use of uninitialized memory in X509_check_host (boo#1165300).
- CVE-2020-7041: Fixed incorrect use of X509_check_host (boo#1165299).

This update was imported from the openSUSE:Leap:15.1:Update update project.

References

CVE: CVE-2020-7043
CVE: CVE-2020-7042
CVE: CVE-2020-7041
Bugzilla: 1165301 https://bugzilla.opensuse.org/show_bug.cgi?id=1165301
Bugzilla: 1165300 https://bugzilla.opensuse.org/show_bug.cgi?id=1165300
Bugzilla: 1165299 https://bugzilla.opensuse.org/show_bug.cgi?id=1165299

Packages

openfortivpn-1.12.0-bp151.3.3.1