Stay Secure with the Latest Linux Advisories

security advisoryfedoratls

Fedora: 2009-12968 Critical: nss-util TLS MITM Attack Resolution

Update to 3.12.5 This update fixes the following security flaw: CVE-2009-3555 TLS: MITM attacks via session renegotiation. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-12968 2009-12-10 03:28:57 -------------------------------------------------------------------------------- Name : nss-util Product : Fedora 12 Version : 3.12.5 Release : 1.fc12.1 URL : https://firefox-source-docs.mozilla.org/security/nss/index.html Summary : Network Security Services Utilities Library Description : Utilities for Network Security Services and the Softoken module -------------------------------------------------------------------------------- Update Information: Update to 3.12.5 This update fixes the following security flaw: CVE-2009-3555 TLS: MITM attacks via session renegotiation -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 3 2009 Elio Maldonado - 3.12.5-1.1 - Update to 3.12.5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #533125 - CVE-2009-3555 TLS: MITM attacks via session renegotiation https://bugzilla.redhat.com/show_bug.cgi?id=533125 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update nss-util' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . The latest update to Fedora'snss-util tackles a severe vulnerability that facilitates TLS man-in-the-middle attacks through session renegotiation.. Fedora Update, NSS Utilities, TLS Security Fix, Session Renegotiation, MITM Attack Resolution. . Severity: Critical. LinuxSecurity.com Team

Dec 10, 2009 •Critical Fedora