Alerts This Week
Warning Icon 1 989
Alerts This Week
Warning Icon 1 989

Ubuntu 20.04 LTS: USN-4384-1 Moderate: GnuTLS Sensitive Info Exposure

ubuntu
Calendar Grey June 5, 2020
Dist Ubuntu Esm H88
GnuTLS flaw found on Ubuntu systems, risking confidential data and affecting login procedures. Upgrade advised.
GnuTLS could be made to expose sensitive information.

Summary

GnuTLS could be made to expose sensitive information.

Software Description:

- gnutls28: GNU TLS library

Details:

It was discovered that GnuTLS incorrectly handled session ticket encryption

keys. A remote attacker could possibly use this issue to bypass

authentication or recover sensitive information.

Topics%20covered

Topics Covered

security advisory remote attack authentication issue ubuntu gnutls sensitive information

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
  libgnutls30                     3.6.13-2ubuntu1.1

Ubuntu 19.10:
  libgnutls30                     3.6.9-5ubuntu1.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4384-1

CVE-2020-13777

June 05, 2020

Topics%20covered

Topics Covered

security advisory remote attack authentication issue ubuntu gnutls sensitive information

Package Information

https://launchpad.net/ubuntu/+source/gnutls28/3.6.13-2ubuntu1.1
https://launchpad.net/ubuntu/+source/gnutls28/3.6.9-5ubuntu1.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here