Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:2209-1

Опубликовано: 31 авг. 2016
Источник: suse-cvrf

Описание

Security update for libtcnative-1-0

This update for libtcnative-1-0 fixes the following issues:

  • Disable 512-bit export-grade cryptography to prevent Logjam vulnerability CVE-2015-4000 (bsc#938945)

Список пакетов

SUSE Linux Enterprise Server 12 SP1
libtcnative-1-0-1.1.32-9.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
libtcnative-1-0-1.1.32-9.1
SUSE Linux Enterprise Software Development Kit 12 SP1
libtcnative-1-0-devel-1.1.32-9.1

Ссылки

Описание

The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP1:libtcnative-1-0-1.1.32-9.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1:libtcnative-1-0-1.1.32-9.1
SUSE Linux Enterprise Software Development Kit 12 SP1:libtcnative-1-0-devel-1.1.32-9.1
Ссылки