MGASA-2016-0326
- Source
- https://advisories.mageia.org/MGASA-2016-0326.html
- Import Source
- https://advisories.mageia.org/MGASA-2016-0326.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2016-0326
- Related
- Published
- 2016-09-28T05:59:24Z
- Modified
- 2016-09-28T05:50:24Z
- Summary
- Updated gnutls packages fix security vulnerability
- Details
-
An issue was found in certificate validation using OCSP responses caused by not verifying the serial length, which can falsely report a certificate as valid (CVE-2016-7444).
- References
-
- https://advisories.mageia.org/MGASA-2016-0326.html
- https://bugs.mageia.org/show_bug.cgi?id=19358
- http://gnutls.org/security.html#GNUTLS-SA-2016-3
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/R3BHGPTCK63HOFYABBXNV567ESVRRKQD/
- http://openwall.com/lists/oss-security/2016/09/18/7
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:5 / gnutls
Package
- Name
- gnutls
- Purl
- pkg:rpm/mageia/gnutls?distro=mageia-5