Verwendung schwacher Verschlüsselung in Mozilla Firefox
ID: | USN-2866-1 |
Distribution: | Ubuntu |
Plattformen: | Ubuntu 12.04 LTS, Ubuntu 14.04 LTS, Ubuntu 15.04, Ubuntu 15.10 |
Datum: | Mo, 11. Januar 2016, 08:43 |
Referenzen: | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7575 |
Applikationen: | Mozilla Firefox |
Originalnachricht |
|
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --===============3043729863185521829== Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="C40FQMDT4hjNenqS825B1WGNTRxEBOKCq" This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --C40FQMDT4hjNenqS825B1WGNTRxEBOKCq Content-Type: text/plain; charset=windows-125 Content-Transfer-Encoding: quoted-printable ========================================================================== Ubuntu Security Notice USN-2866-1 January 08, 2016 firefox vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 15.10 - Ubuntu 15.04 - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS Summary: Firefox could be made to expose sensitive information over the network. Software Description: - firefox: Mozilla Open Source web browser Details: Karthikeyan Bhargavan and Gaetan Leurent discovered that NSS incorrectly allowed MD5 to be used for TLS 1.2 connections. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to view sensitive information. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 15.10: firefox 43.0.4+build3-0ubuntu0.15.10.1 Ubuntu 15.04: firefox 43.0.4+build3-0ubuntu0.15.04.1 Ubuntu 14.04 LTS: firefox 43.0.4+build3-0ubuntu0.14.04.1 Ubuntu 12.04 LTS: firefox 43.0.4+build3-0ubuntu0.12.04.1 After a standard system update you need to restart Firefox to make all the necessary changes. References: http://www.ubuntu.com/usn/usn-2866-1 CVE-2015-7575 Package Information: https://launchpad.net/ubuntu/+source/firefox/43.0.4+build3-0ubuntu0.15.10.1 https://launchpad.net/ubuntu/+source/firefox/43.0.4+build3-0ubuntu0.15.04.1 https://launchpad.net/ubuntu/+source/firefox/43.0.4+build3-0ubuntu0.14.04.1 https://launchpad.net/ubuntu/+source/firefox/43.0.4+build3-0ubuntu0.12.04.1 --C40FQMDT4hjNenqS825B1WGNTRxEBOKCq Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJWkDPtAAoJEGEfvezVlG4PVZEH/j0UWBrSGfoCs1kfw6jLzHbc wUCrCAwmYu/87S5vtFIuVLOHXERbxs9KbW+DpOKZBcvTc8QK+RBr1+f1+GD45rnx SGgbLIZFJsURxdpvfCFDNuTMY4635z92fpE7Y4QXLBlNL7vAvXY4m7iu1aVi6/qB yXdF/l6kF7j708kIvH8dEwRPo5UlZqZfBhDdEV440HWUa0KHNnOsOlQPqlrcLTtF vtgYBd/OP3thPPxWCrNtv7TfRu5a2NBsD11x7vFWKoqaT0CElQa3RW7QD2F1piyr Jb5RVLTl1uDOL12dUCypKYk71v6vWfIqSXoifloiMyDl48Hj5AZLS0kxLkOCfeY= =9fGT -----END PGP SIGNATURE----- --C40FQMDT4hjNenqS825B1WGNTRxEBOKCq-- --===============3043729863185521829== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline -- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce --===============3043729863185521829==-- |