Alerts This Week
Warning Icon 1 609
Alerts This Week
Warning Icon 1 609

CentOS: CESA-2022:0290 Important: Libgcrypt Denial of Service

slackware
Calendar Grey June 28, 2008
Dist Slackware Esm H88
Updated gnutls packages for Slackware resolve severe security vulnerabilities. Upgrade now to strengthen your system's defense!
New gnutls packages are available for Slackware 12.0, 12.1, and -current to fix security issues

Summary

Here are the details from the Slackware 12.1 ChangeLog: patches/packages/gnutls-2.2.5-i486-1_slack12.1.tgz: Upgraded to GnuTLS version 2.2.5. This updated package fixes bugs which can lead to a denial of service (DoS) in programs linked with GnuTLS. Thanks to Ossi Herrala and Jukka Taimisto from the CROSS project at Codenomicon Ltd. for finding and reporting the problems, and to Simon Josefsson and Nikos Mavrogiannopoulos for researching the issues and developing patches, and to Andreas Metzler for noting and reporting a problem with one of the original patches. For more information about the issues patched, please refer to: https://www.cve.org/CVERecord?id=CVE-2008-1948 https://www.cve.org/CVERecord?id=CVE-2008-1949 https://www.cve.org/CVERecord?id=CVE-2008-1950 (* Security fix *)

Topics%20covered

Topics Covered

security advisory security issue update DoS package upgrade Slackware GnuTLS

Where Find New Packages

HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 12.0:
Updated package for Slackware 12.1:
Updated package for Slackware -current:

MD5 Signatures

Slackware 12.0 package: d2b785848c94849ccb5e64331f856981 gnutls-1.6.3-i486-1_slack12.0.tgz
Slackware 12.1 package: c86c9a2aff1e2ab36d1997b2351ead33 gnutls-2.2.5-i486-1_slack12.1.tgz
Slackware -current package: 7e5db6ab564e51b9d4ff3eeafd6db791 gnutls-2.2.5-i486-1.tgz

Severity
important
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory security issue update DoS package upgrade Slackware GnuTLS

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the packages as root: # upgradepkg gnutls-2.2.5-i486-1_slack12.1.tgz Then, restart any programs that are linked to GnuTLS.

Related News

Your message here