SUSE-SU-2020:1264-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/SUSE-SU-2020:1264-1

Related

Published

2020-05-13T07:46:43Z

Modified

2025-05-08T17:15:15.341614Z

Upstream

Summary

Security update for openconnect

Details

This update for openconnect fixes the following issue:

Security issue fixed:

CVE-2020-12105: Fixed the improper handling of negative return values from X509check function calls that might have allowed MITM attacks (bsc#1170452).

Non-security issue fixed:

This is a rebuild to have a higher version than openconnect on Packagehub, to avoid having a vpnc dependency. (bsc#1142093)
A vpnc-script is included in this openconnect package.

References

Affected packages

Name: openconnect
Purl: pkg:rpm/suse/openconnect&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP4

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.08-3.9.1

{
    "binaries": [
        {
            "openconnect": "7.08-3.9.1",
            "openconnect-lang": "7.08-3.9.1"
        }
    ]
}

Name: openconnect
Purl: pkg:rpm/suse/openconnect&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.08-3.9.1

{
    "binaries": [
        {
            "openconnect": "7.08-3.9.1",
            "openconnect-lang": "7.08-3.9.1"
        }
    ]
}