Debian Security Advisory DSA-3437-1 [email protected]
https://www.debian.org/security/ Salvatore Bonaccorso
January 09, 2016 https://www.debian.org/security/faq
Package : gnutls26
CVE ID : CVE-2015-7575
Karthikeyan Bhargavan and Gaetan Leurent at INRIA discovered a flaw in
the TLS 1.2 protocol which could allow the MD5 hash function to be used
for signing ServerKeyExchange and Client Authentication packets during a
TLS handshake. A man-in-the-middle attacker could exploit this flaw to
conduct collision attacks to impersonate a TLS server or an
authenticated TLS client.
More information can be found at
https://www.mitls.org/pages/attacks/SLOTH
For the oldstable distribution (wheezy), this problem has been fixed
in version 2.12.20-8+deb7u5.
We recommend that you upgrade your gnutls26 packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: [email protected]
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 7 | all | iceweasel-l10n-fi | < 38.6.0esr-1~deb7u1 | iceweasel-l10n-fi_38.6.0esr-1~deb7u1_all.deb |
Debian | 8 | all | iceweasel-l10n-id | < 38.6.0esr-1~deb8u1 | iceweasel-l10n-id_38.6.0esr-1~deb8u1_all.deb |
Debian | 8 | all | iceweasel-l10n-hr | < 38.6.0esr-1~deb8u1 | iceweasel-l10n-hr_38.6.0esr-1~deb8u1_all.deb |
Debian | 7 | all | iceweasel-l10n-gd | < 38.6.0esr-1~deb7u1 | iceweasel-l10n-gd_38.6.0esr-1~deb7u1_all.deb |
Debian | 6 | i386 | openjdk-6-demo | < 6b38-1.13.10-1~deb6u1 | openjdk-6-demo_6b38-1.13.10-1~deb6u1_i386.deb |
Debian | 8 | armel | iceweasel-dev | < 38.6.0esr-1~deb8u1 | iceweasel-dev_38.6.0esr-1~deb8u1_armel.deb |
Debian | 7 | s390 | libgnutls26 | < 2.12.20-8+deb7u5 | libgnutls26_2.12.20-8+deb7u5_s390.deb |
Debian | 8 | amd64 | openjdk-7-jdk | < 7u95-2.6.4-1~deb8u1 | openjdk-7-jdk_7u95-2.6.4-1~deb8u1_amd64.deb |
Debian | 7 | s390 | libgnutls26-dbg | < 2.12.20-8+deb7u5 | libgnutls26-dbg_2.12.20-8+deb7u5_s390.deb |
Debian | 7 | armel | icedtea-6-jre-cacao | < 6b38-1.13.10-1~deb7u1 | icedtea-6-jre-cacao_6b38-1.13.10-1~deb7u1_armel.deb |