Instructions to address gnutls vulnerability

Products

• VMware Integrated OpenStack

Issue/Introduction

A security scan against the management plane vm's return this CVE:

• CVE-2020-13777

Environment

7.3

Cause

Photon has issued a security Advisory, PHSA-2020-3.0-0103

Resolution

The issue with bindutils is addressed with gnutls-3.6.14-1

1. 1. Determine version of package that is installed
      rpm -qa gnutls

      
      
   2. If the package version returned is less than gnutls-3.6.14-1:
tdnf update gnutls