Package name
gnutls
Date
2013-04-05
Advisory ID
MDVSA-2013:040
Affected versions
MBS1 x86_64

Problem description

Nadhem Alfardan and Kenny Paterson devised an attack that recovers
some bits of the plaintext of a GnuTLS session that utilizes that
CBC ciphersuites, by using timing information (CVE-2013-1619).

The gnutls package has been updated to latest 3.0.28 version to fix
above problem.

Updated packages

MBS1 x86_64

 942151b0666c9b58dec41ac9e6b84bac  mbs1/x86_64/gnutls-3.0.28-1.mbs1.x86_64.rpm
 a11ec1c9901d1e60525241e4fb7b3328  mbs1/x86_64/lib64gnutls28-3.0.28-1.mbs1.x86_64.rpm
 5ab8a36480a1d286b51039e082cd6198  mbs1/x86_64/lib64gnutls-devel-3.0.28-1.mbs1.x86_64.rpm
 a269eabac3f59f8c97521a1a372f8ffb  mbs1/x86_64/lib64gnutls-ssl27-3.0.28-1.mbs1.x86_64.rpm
 06ddda051bcdd9787c1b55732994df95  mbs1/x86_64/lib64tasn1_3-2.14-1.mbs1.x86_64.rpm
 4e4baa2bc639b93ad1d372af7ad8b8ec  mbs1/x86_64/lib64tasn1-devel-2.14-1.mbs1.x86_64.rpm
 9554ffa6981c65d56214ec731c27494e  mbs1/x86_64/libtasn1-tools-2.14-1.mbs1.x86_64.rpm 
 4a46d2f718c65a76c55af4161e3d9d72  mbs1/SRPMS/gnutls-3.0.28-1.mbs1.src.rpm
 03c3cec31c63d818223aa6ec87bfba73  mbs1/SRPMS/libtasn1-2.14-1.mbs1.src.rpm

References