Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 512
Alerts This Week
Warning Icon 1 512

Ubuntu 18.04 & 16.04 LTS: USN-4233-1 GnuTLS SHA1 Untrusted Directive

ubuntu
Calendar Grey January 9, 2020
Scroller Ubuntu
Recent updates in GnuTLS have rendered SHA1 as unreliable to bolster security measures. Discover ways to safeguard your Ubuntu system.
SHA1 has been marked as untrusted in GnuTLS.

Summary

SHA1 has been marked as untrusted in GnuTLS.

Software Description:

- gnutls28: GNU TLS library

Details:

As a security improvement, this update marks SHA1 as being untrusted for

digital signature operations.

Topics%20covered

Topics Covered

security advisory ubuntu gnutls digital signatures SHA1 issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  libgnutls30                     3.5.18-1ubuntu1.2

Ubuntu 16.04 LTS:
  libgnutls30                     3.4.10-4ubuntu1.6

In general, a standard system update will make all the necessary changes.

References

https://bugs.launchpad.net/ubuntu/+source/gnutls28/+bug/1858691

Severity
important
Lowest
Low
Medium
High
Critical

January 09, 2020

Topics%20covered

Topics Covered

security advisory ubuntu gnutls digital signatures SHA1 issue

Package Information

https://launchpad.net/ubuntu/+source/gnutls28/3.5.18-1ubuntu1.2
https://launchpad.net/ubuntu/+source/gnutls28/3.4.10-4ubuntu1.6

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.