Описание
Security update for libtcnative-1-0
This update for libtcnative-1-0 fixes the following issues:
- Disable 512-bit export-grade cryptography to prevent Logjam vulnerability CVE-2015-4000 (bsc#938945)
This update was imported from the SUSE:SLE-12:Update update project.
Список пакетов
openSUSE Leap 42.1
libtcnative-1-0-1.1.32-7.1
libtcnative-1-0-devel-1.1.32-7.1
Ссылки
- E-Mail link for openSUSE-SU-2016:2267-1
- SUSE Security Ratings
Описание
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.
Затронутые продукты
openSUSE Leap 42.1:libtcnative-1-0-1.1.32-7.1
openSUSE Leap 42.1:libtcnative-1-0-devel-1.1.32-7.1
Ссылки
- CVE-2015-4000
- SUSE Bug 1074631
- SUSE Bug 931600
- SUSE Bug 931698
- SUSE Bug 931723
- SUSE Bug 931845
- SUSE Bug 932026
- SUSE Bug 932483
- SUSE Bug 934789
- SUSE Bug 935033
- SUSE Bug 935540
- SUSE Bug 935979
- SUSE Bug 936168
- SUSE Bug 937202
- SUSE Bug 937724
- SUSE Bug 937766
- SUSE Bug 938248
- SUSE Bug 938432
- SUSE Bug 938895
- SUSE Bug 938905