Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Ubuntu 5.04 LTS USN-348-1 Critical: GnuTLS Signature Forgery

ubuntu
Calendar Grey October 16, 2006
Dist Ubuntu Esm H88
A critical vulnerability in the GnuTLS library on Ubuntu allows signature forgery without the private key. Users should update configurations and audit systems.
The GnuTLS library did not sufficiently check the padding of PKCS #1 v1.5 signatures if the exponent of the public key is 3 (which is widely used for CAs)

Summary

Topics%20covered

Topics Covered

security advisory critical doS ubuntu linux signature forgery gnuTLS

Update Instructions

References

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-348-1 September 18, 2006

Topics%20covered

Topics Covered

security advisory critical doS ubuntu linux signature forgery gnuTLS

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here