Stay Secure with the Latest Linux Advisories

security advisorysecurity updatemedium severity

Slackware 15.0: 2023-041-01 Medium: Gnutls TLS Oracle Fix

New gnutls packages are available for Slackware 15.0 and -current to fix a security issue. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] gnutls (SSA:2023-041-01) New gnutls packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: +--------------------------+ patches/packages/gnutls-3.7.9-i586-1_slack15.0.txz: Upgraded. libgnutls: Fix a Bleichenbacher oracle in the TLS RSA key exchange. Reported by Hubert Kario (#1050). Fix developed by Alexander Sosedkin. [GNUTLS-SA-2020-07-14, CVSS: medium] [CVE-2023-0361] For more information, see: https://www.cve.org/CVERecord?id=CVE-2023-0361 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 15.0: Updated package for Slackware x86_64 15.0: Updated package for Slackware -current: Updated package for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 15.0 package: f0bb05675f86daacb3237b3c556feb23 gnutls-3.7.9-i586-1_slack15.0.txz Slackware x86_64 15.0 package: 961c775b882edf5a7c38e153900c02d1 gnutls-3.7.9-x86_64-1_slack15.0.txz Slackware -current package: ce3a1923420762c2fe874f4b3582b7a0 n/gnutls-3.7.9-i586-1.txz Slackware x86_64 -current package: e3c7d9a173ad43f3ccca8834546e4351 n/gnutls-3.7.9-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg gnutls-3.7.9-i586-1_slack15.0.txz +-----+ . Updated gnutls versions released for Slackware to mitigate a medium-risk TLS vulnerability and improve encryption reliability.. gnutls security, Slackware update, TLS encryption, security package upgrade, open source security. . Severity:Medium. LinuxSecurity.com Team

Feb 10, 2023 •Medium Slackware