Security update for gmp, gnutls, libnettle (moderate)

An update that solves one vulnerability and has three fixes
is now available.

Description:

This update for gmp, gnutls, libnettle fixes the following issues:

Security issue fixed:

• CVE-2020-11501: Fixed zero random value in DTLS client hello
  (bsc#1168345)

FIPS related bugfixes:

• FIPS: Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)
• FIPS: Fixed a cfb8 decryption issue, no longer truncate output IV if
  input is shorter than block size. (bsc#1166881)
• FIPS: Added Diffie Hellman public key verification test. (bsc#1155327)

This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.1:

  zypper in -t patch openSUSE-2020-501=1