gnutls-1.4.1-10.2.0.1.AXS3

エラータID: AXSA:2013-535:01

Release date: 
Monday, July 15, 2013 - 14:34
Subject: 
gnutls-1.4.1-10.2.0.1.AXS3
Affected Channels: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
High
Description: 

GnuTLS is a project that aims to develop a library which provides a secure layer, over a reliable transport layer. Currently the GnuTLS library implements the proposed standards by the IETF's TLS working group.

Security issues fixed with this release:

• CVE-2013-2116
The _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote attackers to cause a denial of service (buffer over-read and crash) via a crafted padding length. NOTE: this might be due to an incorrect fix for CVE-2013-0169.

Solution: 

Update packages.

CVEs: 
CVE-2013-2116
The _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote attackers to cause a denial of service (buffer over-read and crash) via a crafted padding length. NOTE: this might be due to an incorrect fix for CVE-2013-0169.


Additional Info: 

N/A

Download: 

SRPMS
  1. gnutls-1.4.1-10.2.0.1.AXS3.src.rpm
    MD5: 1805ec641eae401e278a03e841c808ed
    SHA-256: 84f28e60bfdaee1964efc53ca9e49b16c29f31ff35db233c3ed8996f0d8cd2f1
    Size: 3.89 MB

Asianux Server 3 for x86
  1. gnutls-1.4.1-10.2.0.1.AXS3.i386.rpm
    MD5: 4b22c5a02d34ea4b0d90a5cf4ffc35a1
    SHA-256: 714450b8957ead2e26b7a7e477d2d4f791d6d5f41f46791ffb7da4264cfb0a92
    Size: 374.56 kB
  2. gnutls-devel-1.4.1-10.2.0.1.AXS3.i386.rpm
    MD5: 5e45a2ff8456feb1db2332ec478908f5
    SHA-256: bcfb9af00af8213604e5c649c0a42130cc5fd83f60da183fffdd29d104f76788
    Size: 928.56 kB

Asianux Server 3 for x86_64
  1. gnutls-1.4.1-10.2.0.1.AXS3.x86_64.rpm
    MD5: 0effd1465714c07a76a96778f4f904e6
    SHA-256: 6f066db58e36f812314f035971856aab54bcfeacd08327046e47284a75b32025
    Size: 387.93 kB
  2. gnutls-devel-1.4.1-10.2.0.1.AXS3.x86_64.rpm
    MD5: 048d636fdb980a7605dc1cb3d28bf256
    SHA-256: 522f0a9ec2d289d52ec75a75033435b2b9f67d4a5b8dcb37d31c3fccccc1bd5e
    Size: 947.66 kB