Alpine/gnutls: high 7.4

GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is

Action: Upgrade gnutls to 3.6.14-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2020-13777#Alpine:v3.13/gnutls
• https://security.alpinelinux.org/vuln/CVE-2020-13777

published 2020-06-04T07:15:10Z · modified 2026-09-11T10:17:51.373665482Z · JSON