Debian/gnutls28: high 7.4

GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is

Action: Upgrade gnutls28 to 3.6.14-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2020-13777
• https://security-tracker.debian.org/tracker/CVE-2020-13777

published 2020-06-04T07:15:10Z · modified 2026-10-15T09:47:31.961654535Z · JSON