p PatchFirst

USN-4233-2

USN-4233-2 · gnutls28 update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

USN-4233-1 disabled SHA1 being used for digital signature operations in GnuTLS. In certain network environments, certificates using SHA1 may still be in use. This update adds the %VERIFY_ALLOW_BROKEN and %VERIFY_ALLOW_SIGN_WITH_SHA1 priority strings that can be used to temporarily re-enable SHA1 until certificates can be replaced with a stronger algorithm. Original advisory details: As a security improvement, this update marks SHA1 as being untrusted for digital signature operations.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • gnutls28 Ubuntu:16.04:LTS

    Versions
    • 3.3.15-5ubuntu2
    • 3.3.18-1ubuntu1
    • 3.3.20-1ubuntu1
    • 3.4.9-2ubuntu1
    • 3.4.10-4ubuntu1
    • 3.4.10-4ubuntu1.1
    • 3.4.10-4ubuntu1.2
    • 3.4.10-4ubuntu1.3
    • 3.4.10-4ubuntu1.4
    • 3.4.10-4ubuntu1.5
    • 3.4.10-4ubuntu1.6
    Affected ranges
    • ECOSYSTEM: < 3.4.10-4ubuntu1.7

    Update to 3.4.10-4ubuntu1.7

  • gnutls28 Ubuntu:18.04:LTS

    Versions
    • 3.5.8-6ubuntu3
    • 3.5.17-1ubuntu1
    • 3.5.17-1ubuntu3
    • 3.5.18-1ubuntu1
    • 3.5.18-1ubuntu1.1
    • 3.5.18-1ubuntu1.2
    Affected ranges
    • ECOSYSTEM: < 3.5.18-1ubuntu1.3

    Update to 3.5.18-1ubuntu1.3

Original sources

Check your server →