drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Preisgabe von Informationen in libgcrypt
Name: |
Preisgabe von Informationen in libgcrypt |
|
ID: |
MDVSA-2014:176 |
|
Distribution: |
Mandriva |
|
Plattformen: |
Mandriva Business Server 1.0 |
|
Datum: |
Fr, 5. September 2014, 15:36 |
|
Referenzen: |
http://advisories.mageia.org/MGASA-2014-0365.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5270 |
|
Applikationen: |
libgcrypt |
|
Originalnachricht |
This is a multi-part message in MIME format...
------------=_1409922553-11161-1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2014:176 http://www.mandriva.com/en/support/security/ _______________________________________________________________________
Package : libgcrypt Date : September 5, 2014 Affected: Business Server 1.0 _______________________________________________________________________
Problem Description:
Updated libgcrypt packages fix security vulnerability: The libgcrypt library before version 1.5.4 is vulnerable to an ELGAMAL side-channel attack (CVE-2014-5270). _______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5270 http://advisories.mageia.org/MGASA-2014-0365.html _______________________________________________________________________
Updated Packages:
Mandriva Business Server 1/X86_64: a5ea19d60259d81014263c0ec87d555d mbs1/x86_64/lib64gcrypt11-1.5.4-1.mbs1.x86_64.rpm 238e2d5c09ff7df95f0340a3f2d39e95 mbs1/x86_64/lib64gcrypt-devel-1.5.4-1.mbs1.x86_64.rpm 16ed562786a49eb7458dea8c1dd1af05 mbs1/SRPMS/libgcrypt-1.5.4-1.mbs1.src.rpm _______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/en/support/security/advisories/
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com _______________________________________________________________________
Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux)
iD8DBQFUCae9mqjQ0CJFipgRAmHcAKCsIpnXG91YoA+USYSzu4iVp+1rcACg5rr3 AY9sfYdVuticxFyQeCWERPQ= =4dHk -----END PGP SIGNATURE-----
------------=_1409922553-11161-1 Content-Type: text/plain; charset="UTF-8"; name="message-footer.txt" Content-Disposition: inline; filename="message-footer.txt" Content-Transfer-Encoding: 8bit
To unsubscribe, send a email to sympa@mandrivalinux.org with this subject : unsubscribe security-announce _______________________________________________________ Want to buy your Pack or Services from Mandriva? Go to http://store.mandriva.com _______________________________________________________
------------=_1409922553-11161-1--
|
|
|
|