Linux, falla critica GnuTLS

Notizie in diretta dal mondo della tecnologia e di Linux.

Moderators: sabayonino, Moderators

Post Reply
User avatar
sabayonino
Sagely Hen
Posts: 3252
Joined: Sun Sep 21, 2008 1:12
Location: Italy
Contact:

Linux, falla critica GnuTLS

Post by sabayonino » Wed Mar 05, 2014 19:58

Linux, falla critica GnuTLS lascia vulnerabili milioni di sistemi e app

Una falla critica alla GnuTLS Library, una popolare risorsa per la crittografia, lascia spalancate le porte allo spionaggio informatico su sistemi e pacchetti open source molto popolari.

(Continua... Via Downloadblog.it)
[...] Inutile dire che la falla è imbarazzante, specie perché in un ambiente open source è piuttosto anormale che un simile buco passasse inosservato tanto a lungo pur restando sotto agli occhi di tutti.[...]
Image


http://www.gnutls.org/security.html#GNUTLS-SA-2014-2
How to mitigate the attack?

Upgrade to the latest GnuTLS version (3.2.12 or 3.1.22), or apply the patch for GnuTLS 2.12.x.
https://bugs.gentoo.org/show_bug.cgi?id=503394

http://packages.gentoo.org/package/net-libs/gnutls
[Che Cos'è Il Calcolo Distribuito (BOINC)

BOINC ready ! Sabayon+BOINC = BILD ,my Sabayon spin :cyclops: - Ready to crunch for the Science everywhere :)

winrar
Baby Hen
Posts: 3
Joined: Thu Mar 06, 2014 1:52

Re: Linux, falla critica GnuTLS

Post by winrar » Thu Mar 06, 2014 2:19

I definitely do not speak Italian, but...

I did all the work already! :D

I really didn't do any work, kudos to Nikos Mavrogiannopoulos for finding his own bug and submitting patches so that guys like me can come along and steal his credit :D

User avatar
sabayonino
Sagely Hen
Posts: 3252
Joined: Sun Sep 21, 2008 1:12
Location: Italy
Contact:

Re: Linux, falla critica GnuTLS

Post by sabayonino » Thu Mar 06, 2014 12:26

winrar wrote:I definitely do not speak Italian, but...

I did all the work already! :D

I really didn't do any work, kudos to Nikos Mavrogiannopoulos for finding his own bug and submitting patches so that guys like me can come along and steal his credit :D
tnx , gnutls is already pached in sabayonlinux.org repository https://packages.sabayon.org/show/gnutl ... 5,standard

net-libs/gnutls-2.12.23-r4 is already patched

see https://packages.sabayon.org/show/gnutl ... -show-what
[Che Cos'è Il Calcolo Distribuito (BOINC)

BOINC ready ! Sabayon+BOINC = BILD ,my Sabayon spin :cyclops: - Ready to crunch for the Science everywhere :)

Post Reply