Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Fedora 25: 2016-11-19 Critical: Mingw-GnuTLS Cache-Timing Attack

fedora
Calendar Grey November 19, 2016
Dist Fedora Esm H88
Crucial patch released for Mingw GnuTLS addressing cache-timing vulnerabilities. Ensure your Fedora 25 system remains protected and consistently updated.
Nettle 3.3: GnuTLS 3.5.5: https://lists.gnupg.org/pipermail/gnutls-devel/2016-October/008194.html

Summary

GnuTLS TLS/SSL encryption library. This library is cross-compiled

for MinGW.

Update Information:

Nettle 3.3: GnuTLS 3.5.5: https://lists.gnupg.org/pipermail/gnutls-devel/2016-October/008194.html

Topics%20covered

Topics Covered

security advisory fedora critical mingw-gnuts cache-timing attack

Change Log

References


[ 1 ] Bug #1362016 - CVE-2016-6489 nettle: RSA/DSA code is vulnerable to cache-timing related attacks https://bugzilla.redhat.com/show_bug.cgi?id=1362016

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade mingw-gnutls' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: mingw-gnutls
Product: Fedora 25
Version: 3.5.5
Release: 2.fc25
URL: http://www.gnutls.org/
Summary: MinGW GnuTLS TLS/SSL encryption library

Topics%20covered

Topics Covered

security advisory fedora critical mingw-gnuts cache-timing attack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here