gnutls-2.8.5-18.AXS4

エラータID: AXSA:2015-329:01

Release date: 
Tuesday, August 11, 2015 - 14:50
Subject: 
gnutls-2.8.5-18.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
Moderate
Description: 

GnuTLS is a project that aims to develop a library which provides a secure
layer, over a reliable transport layer. Currently the GnuTLS library implements
the proposed standards by the IETF's TLS working group.

Security issues fixed with this release:

CVE-2014-8155
CVE-2015-0282
CVE-2015-0294

Fixed bugs:

* Previously, under certain circumstances, the certtool utility could generate
X.509 certificates which contained a negative modulus. Consequently, such
certificates could have interoperation problems with the software using them.
With this update, the bug has been fixed.

Solution: 

Update packages.

CVEs: 
CVE-2014-8155
GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-middle attackers to spoof servers via a certificate issued by a CA certificate that is (1) not yet valid or (2) no longer valid.
CVE-2015-0282
GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.
CVE-2015-0294
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
Additional Info: 

N/A

Download: 

SRPMS
  1. gnutls-2.8.5-18.AXS4.src.rpm
    MD5: ca9e8844c72a7fc7d76618e6be883889
    SHA-256: 434ddb8afe7346ca8a2e5220f18fc4cb5f67051ce2ac0af61a03b80b82432cd4
    Size: 6.04 MB

Asianux Server 4 for x86
  1. gnutls-2.8.5-18.AXS4.i686.rpm
    MD5: 6a7c065d9de3b725b721493e69b15b0d
    SHA-256: a1824037776a4f609fb64c7dc58c9894a130fe8dee6d33c705b5875f2686befe
    Size: 340.91 kB
  2. gnutls-devel-2.8.5-18.AXS4.i686.rpm
    MD5: cc30714b5fff426542b94d7a0156297a
    SHA-256: 670e97b1096640a989d7cec19a08052b9327f45de641cbf2334c28ebde4de778
    Size: 1.06 MB
  3. gnutls-utils-2.8.5-18.AXS4.i686.rpm
    MD5: 842b0461be673d46f544f3acb573e609
    SHA-256: dcfa6b9aa85d6a40a44f96dbf9415fb9c736b1bb9fa6d0f52ce0f8b5e3a4ecb0
    Size: 98.24 kB

Asianux Server 4 for x86_64
  1. gnutls-2.8.5-18.AXS4.x86_64.rpm
    MD5: 6af9b794ea4948ccc7e68cf8dae262ad
    SHA-256: bd79662883af98b42868549ce3f2352a447b86eb02e60d1ebbccd0b40d3fbe11
    Size: 346.16 kB
  2. gnutls-devel-2.8.5-18.AXS4.x86_64.rpm
    MD5: b801036c85c86691dfc64ad666281358
    SHA-256: 1aeaba9c7f2bcf07f6a011db04c516f42c4fe05e082827c73f3e767d19b53071
    Size: 1.06 MB
  3. gnutls-utils-2.8.5-18.AXS4.x86_64.rpm
    MD5: 4954e565c2b32d3b807820d177e0ee35
    SHA-256: 8c0b6d5c6e8a044ea7cd93f03baa3be67a6166ee9b7fc7e3aeeb488d79dd860e
    Size: 99.63 kB
  4. gnutls-2.8.5-18.AXS4.i686.rpm
    MD5: 6a7c065d9de3b725b721493e69b15b0d
    SHA-256: a1824037776a4f609fb64c7dc58c9894a130fe8dee6d33c705b5875f2686befe
    Size: 340.91 kB
  5. gnutls-devel-2.8.5-18.AXS4.i686.rpm
    MD5: cc30714b5fff426542b94d7a0156297a
    SHA-256: 670e97b1096640a989d7cec19a08052b9327f45de641cbf2334c28ebde4de778
    Size: 1.06 MB