Login
Newsletter
Werbung

Sicherheit: Mehrere Probleme in gnutls
Aktuelle Meldungen Distributionen
Name: Mehrere Probleme in gnutls
ID: SSA:2008-180-01
Distribution: Slackware
Plattformen: Slackware -current, Slackware 12.0, Slackware 12.1
Datum: So, 29. Juni 2008, 01:07
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1948
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1949
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1950
Applikationen: GNU Transport Layer Security Library

Originalnachricht


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security] gnutls (SSA:2008-180-01)

New gnutls packages are available for Slackware 12.0, 12.1, and -current to
fix security issues.

More details about the issues may be found in the Common
Vulnerabilities and Exposures (CVE) database:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1948
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1949
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1950


Here are the details from the Slackware 12.1 ChangeLog:
+--------------------------+
patches/packages/gnutls-2.2.5-i486-1_slack12.1.tgz:
Upgraded to GnuTLS version 2.2.5.
This updated package fixes bugs which can lead to a denial of service
(DoS) in programs linked with GnuTLS. Thanks to Ossi Herrala and
Jukka Taimisto from the CROSS project at Codenomicon Ltd. for finding
and reporting the problems, and to Simon Josefsson and
Nikos Mavrogiannopoulos for researching the issues and developing
patches, and to Andreas Metzler for noting and reporting a problem with
one of the original patches.
For more information about the issues patched, please refer to:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1948
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1949
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1950
(* Security fix *)
+--------------------------+


Where to find the new packages:
+-----------------------------+

HINT: Getting slow download speeds from ftp.slackware.com?
Give slackware.osuosl.org a try. This is another primary FTP site
for Slackware that can be considerably faster than downloading
directly from ftp.slackware.com.

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating additional FTP and rsync hosting
to the Slackware project! :-)

Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.

Updated package for Slackware 12.0:
gnutls-1.6.3-i486-1_slack12.0.tgz

Updated package for Slackware 12.1:
gnutls-2.2.5-i486-1_slack12.1.tgz

Updated package for Slackware -current:
gnutls-2.2.5-i486-1.tgz


MD5 signatures:
+-------------+

Slackware 12.0 package:
d2b785848c94849ccb5e64331f856981 gnutls-1.6.3-i486-1_slack12.0.tgz

Slackware 12.1 package:
c86c9a2aff1e2ab36d1997b2351ead33 gnutls-2.2.5-i486-1_slack12.1.tgz

Slackware -current package:
7e5db6ab564e51b9d4ff3eeafd6db791 gnutls-2.2.5-i486-1.tgz


Installation instructions:
+------------------------+

Upgrade the packages as root:
# upgradepkg gnutls-2.2.5-i486-1_slack12.1.tgz

Then, restart any programs that are linked to GnuTLS.


+-----+

Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com

+------------------------------------------------------------------------+
| To leave the slackware-security mailing list: |
+------------------------------------------------------------------------+
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message: |
| |
| unsubscribe slackware-security |
| |
| You will get a confirmation message back containing instructions to |
| complete the process. Please do not reply to this email address. |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkhms9UACgkQakRjwEAQIjOZfQCfQOqZenWKaMwzGrIghUC8pkMc
AlkAn19tOKjhcb9UT/igY9vnxteYlIKJ
=pgvf
-----END PGP SIGNATURE-----
Pro-Linux
Traut euch!
Neue Nachrichten
Werbung