gnutls-2.8.5-19.AXS4
エラータID: AXSA:2016-014:01
Release date:
Friday, January 8, 2016 - 11:43
Subject:
gnutls-2.8.5-19.AXS4
Affected Channels:
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity:
Moderate
Description:
GnuTLS is a project that aims to develop a library which provides a secure
layer, over a reliable transport layer. Currently the GnuTLS library implements
the proposed standards by the IETF's TLS working group.
Security issues fixed with this release:
CVE-2015-7575
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
Solution:
Update packages.
CVEs:
CVE-2015-7575
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.
Additional Info:
N/A
Download:
SRPMS
- gnutls-2.8.5-19.AXS4.src.rpm
MD5: 482049726934d976721457544f21bde6
SHA-256: 276c6211a965a4c4957264e6aeb01431a9052cc54434e411d3673f0601906477
Size: 6.04 MB
Asianux Server 4 for x86
- gnutls-2.8.5-19.AXS4.i686.rpm
MD5: 8a17da95ea48017d92dfe8cf9a0f57ef
SHA-256: 470e9aa98ed1ac8a3a8e74a8bf06ce6e276c1cb81d00730a77d0a9c9dcc0bb04
Size: 341.04 kB - gnutls-devel-2.8.5-19.AXS4.i686.rpm
MD5: 374f3ff0cc878586dc19397a941a9c62
SHA-256: e79fa83b9883da9f8843e8833503d460c6774f3d1ada74678ea9f0678b364ae0
Size: 1.06 MB - gnutls-utils-2.8.5-19.AXS4.i686.rpm
MD5: 5a2289d331481abc2cf06c3a3086568a
SHA-256: 7994039f530d0dd233eab0c5991c5b7c62e353c8d66ba4ad2c4884afcf92e5a8
Size: 98.37 kB
Asianux Server 4 for x86_64
- gnutls-2.8.5-19.AXS4.x86_64.rpm
MD5: 2b2fbdd136e7181c96ed28e81c11ff3a
SHA-256: c8240f13b2cf38ea081846396efe1a01efc774daebc9d9b868a4767fe49648c9
Size: 346.30 kB - gnutls-devel-2.8.5-19.AXS4.x86_64.rpm
MD5: 0c7b49091d724bca4d643036200604e1
SHA-256: 443e70555edf0ad99670ebde0ccfed9b902c93c4dcfe8e74bfa2037465b2e70d
Size: 1.06 MB - gnutls-utils-2.8.5-19.AXS4.x86_64.rpm
MD5: 7b7a83def957141c386bac84bb75af3d
SHA-256: d3be4719db807bc42e39f37fdd57ff951808a2d190f63582b01e745b1d3bcdba
Size: 99.77 kB - gnutls-2.8.5-19.AXS4.i686.rpm
MD5: 8a17da95ea48017d92dfe8cf9a0f57ef
SHA-256: 470e9aa98ed1ac8a3a8e74a8bf06ce6e276c1cb81d00730a77d0a9c9dcc0bb04
Size: 341.04 kB - gnutls-devel-2.8.5-19.AXS4.i686.rpm
MD5: 374f3ff0cc878586dc19397a941a9c62
SHA-256: e79fa83b9883da9f8843e8833503d460c6774f3d1ada74678ea9f0678b364ae0
Size: 1.06 MB