PT-2016-7925 · Gnu · Gnutls+1

Publicado 2016-02-24 · Atualizado 2016-02-24

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions ca-certificates (affected versions not specified) GnuTLS (affected versions not specified)

Description The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates, including the removal of the SPI CA and CA certificates with 1024-bit RSA keys. An update to the GnuTLS package adds support for alternate certificate chains to properly handle the removal of these certificates.

Recommendations For ca-certificates, update to a version that includes the refreshed certificates. For GnuTLS, apply the update that adds support for alternate certificate chains. At the moment, there is no information about specific versions that contain a fix for this issue.

Identificadores relacionados

USN-2913-4

Produtos afetados

Gnutls

Ca-Certificates

Referências · 3

• https://launchpad.net/bugs/1528645 · Nota
• https://ubuntu.com/security/notices/USN-2913-4 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-2913-4 · Aviso do Fabricante