Secunia Logo
Netsikker nu! 2008
 
Debian update for gnutls13
Secunia Advisory: SA30324
Release Date: 2008-05-21
Popularity: 1,559 views

Critical:
Highly critical
Impact: DoS
System access
Where: From remote
Solution Status: Vendor Patch

OS:Debian GNU/Linux 4.0
Debian GNU/Linux unstable alias sid

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2008-1948
CVE-2008-1949
CVE-2008-1950


Description:
Debian has issued an update for gnutls13. This fixes some vulnerabilities, which can be exploited to cause a DoS (Denial of Service) or to potentially compromise an application using the library.

For more information:
SA30287

Solution:
Apply updated packages.

-- Debian GNU/Linux 4.0 alias etch --

Source archives:

http://security.debian.org/pool/updat...utls13/gnutls13_1.4.4-3+etch1.diff.gz
Size/MD5 checksum:19173 12dfc774f73fbfff5a9853255eb4044e
http://security.debian.org/pool/updat...g/gnutls13/gnutls13_1.4.4.orig.tar.gz
Size/MD5 checksum:4752009 c06ada020e2b69caa51833175d59f8b2
http://security.debian.org/pool/updat...g/gnutls13/gnutls13_1.4.4-3+etch1.dsc
Size/MD5 checksum: 1251 f3b7538539a9a255eac70d8ed816e2d2

Architecture independent packages:

http://security.debian.org/pool/updat...ls13/gnutls-doc_1.4.4-3+etch1_all.deb
Size/MD5 checksum:2305156 92f5504bb67e96400b279148ff36954a

alpha architecture (DEC Alpha)

http://security.debian.org/pool/updat...3/libgnutls13_1.4.4-3+etch1_alpha.deb
Size/MD5 checksum: 327962 019adc4281f16b70ee32b6fb098b6db4
http://security.debian.org/pool/updat...bgnutls13-dbg_1.4.4-3+etch1_alpha.deb
Size/MD5 checksum: 547270 baf92f790799abc128bb9efed980b53d
http://security.debian.org/pool/updat...libgnutls-dev_1.4.4-3+etch1_alpha.deb
Size/MD5 checksum: 523926 fadab0e3396daaa51e25aaf764ebff32
http://security.debian.org/pool/updat...13/gnutls-bin_1.4.4-3+etch1_alpha.deb
Size/MD5 checksum: 196278 2435a7c5406d9e2ea0b75ab7c06f9ee9

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updat...13/gnutls-bin_1.4.4-3+etch1_amd64.deb
Size/MD5 checksum: 182806 c6be7ccc98eed7ed736e62494b816698
http://security.debian.org/pool/updat...bgnutls13-dbg_1.4.4-3+etch1_amd64.deb
Size/MD5 checksum: 538864 a044b7f079d9e26263e019cc097961d2
http://security.debian.org/pool/updat...3/libgnutls13_1.4.4-3+etch1_amd64.deb
Size/MD5 checksum: 314566 339849e531211778332d01e39e806b37
http://security.debian.org/pool/updat...libgnutls-dev_1.4.4-3+etch1_amd64.deb
Size/MD5 checksum: 389130 830c1b21cdfd37cb104c8f5638e8ecd2

hppa architecture (HP PA RISC)

http://security.debian.org/pool/updat...ibgnutls13-dbg_1.4.4-3+etch1_hppa.deb
Size/MD5 checksum: 521698 24bc2603d20bd09f1b50dbc284d7c002
http://security.debian.org/pool/updat...s13/gnutls-bin_1.4.4-3+etch1_hppa.deb
Size/MD5 checksum: 183890 0f5af046360a12c7974af8b8f47c12ca
http://security.debian.org/pool/updat...13/libgnutls13_1.4.4-3+etch1_hppa.deb
Size/MD5 checksum: 312458 bc455a6e70342a891e3e50928df33627
http://security.debian.org/pool/updat.../libgnutls-dev_1.4.4-3+etch1_hppa.deb
Size/MD5 checksum: 434892 d6e3aca67b9e59bb3689fda6a479d1d3

i386 architecture (Intel ia32)

http://security.debian.org/pool/updat.../libgnutls-dev_1.4.4-3+etch1_i386.deb
Size/MD5 checksum: 358100 a1417f99c68ccfe7fe3baaf5b0a82fc4
http://security.debian.org/pool/updat...13/libgnutls13_1.4.4-3+etch1_i386.deb
Size/MD5 checksum: 281748 1b968342495c6fd9e35974fe7794c66a
http://security.debian.org/pool/updat...ibgnutls13-dbg_1.4.4-3+etch1_i386.deb
Size/MD5 checksum: 524782 4af9debc5ebb2f0afbb552599b04a1ea
http://security.debian.org/pool/updat...s13/gnutls-bin_1.4.4-3+etch1_i386.deb
Size/MD5 checksum: 172744 1fc64ca700778b7c076fe18078898293

ia64 architecture (Intel ia64)

http://security.debian.org/pool/updat.../libgnutls-dev_1.4.4-3+etch1_ia64.deb
Size/MD5 checksum: 550132 6cdee2122fcabf7538cbb8a5f8a46dc8
http://security.debian.org/pool/updat...ibgnutls13-dbg_1.4.4-3+etch1_ia64.deb
Size/MD5 checksum: 527970 f79a04ada0467a5e2ad881486f180524
http://security.debian.org/pool/updat...13/libgnutls13_1.4.4-3+etch1_ia64.deb
Size/MD5 checksum: 394710 f3539e1074b5fdf7b4e05a5ae18910d6
http://security.debian.org/pool/updat...s13/gnutls-bin_1.4.4-3+etch1_ia64.deb
Size/MD5 checksum: 229100 a5b608a5d0b08366d46a7e7b378cb76f

mips architecture (MIPS (Big Endian))

http://security.debian.org/pool/updat...ibgnutls13-dbg_1.4.4-3+etch1_mips.deb
Size/MD5 checksum: 552510 4d33587b3d164660b88e1a0aece6de07
http://security.debian.org/pool/updat.../libgnutls-dev_1.4.4-3+etch1_mips.deb
Size/MD5 checksum: 417916 e7b68ae5b9a26748f7ee5c608c6871ad
http://security.debian.org/pool/updat...13/libgnutls13_1.4.4-3+etch1_mips.deb
Size/MD5 checksum: 277948 b4aa68014ab9005a66dc04b8424fe941
http://security.debian.org/pool/updat...s13/gnutls-bin_1.4.4-3+etch1_mips.deb
Size/MD5 checksum: 181700 810ae6a3d92eb7609a0cfd32db043433

mipsel architecture (MIPS (Little Endian))

http://security.debian.org/pool/updat...gnutls13-dbg_1.4.4-3+etch1_mipsel.deb
Size/MD5 checksum: 541700 657c1167d217eb639cf3655b486fcc62
http://security.debian.org/pool/updat...ibgnutls-dev_1.4.4-3+etch1_mipsel.deb
Size/MD5 checksum: 417032 f3beae1dd61de2e3fac5d292fcb1c377
http://security.debian.org/pool/updat.../libgnutls13_1.4.4-3+etch1_mipsel.deb
Size/MD5 checksum: 277698 48986a326282563af743147dc76f0fd5
http://security.debian.org/pool/updat...3/gnutls-bin_1.4.4-3+etch1_mipsel.deb
Size/MD5 checksum: 182654 e86e98f4fbd9659b1b7da3f5ac3ca442

powerpc architecture (PowerPC)

http://security.debian.org/pool/updat.../gnutls-bin_1.4.4-3+etch1_powerpc.deb
Size/MD5 checksum: 184542 dfed7b8ae7a888d65d82e28f4a15d0bd
http://security.debian.org/pool/updat...libgnutls13_1.4.4-3+etch1_powerpc.deb
Size/MD5 checksum: 288842 38db064a06a7b073e456425f74392a51
http://security.debian.org/pool/updat...nutls13-dbg_1.4.4-3+etch1_powerpc.deb
Size/MD5 checksum: 538618 9cfd7c7cdf36aea9c445e237156a8898
http://security.debian.org/pool/updat...bgnutls-dev_1.4.4-3+etch1_powerpc.deb
Size/MD5 checksum: 388748 50dd9f5a82dca333bdbd282992488eab

s390 architecture (IBM S/390)

http://security.debian.org/pool/updat...ibgnutls13-dbg_1.4.4-3+etch1_s390.deb
Size/MD5 checksum: 537378 b60c8caef47fa70cc68399db3b1bde5a
http://security.debian.org/pool/updat...13/libgnutls13_1.4.4-3+etch1_s390.deb
Size/MD5 checksum: 311484 363d2d588467086e7fe144acbd420e56
http://security.debian.org/pool/updat...s13/gnutls-bin_1.4.4-3+etch1_s390.deb
Size/MD5 checksum: 184454 837c2b3b9e82118952a8051d4d52c5ee
http://security.debian.org/pool/updat.../libgnutls-dev_1.4.4-3+etch1_s390.deb
Size/MD5 checksum: 380122 6345f76b43ce87b7419d5f519bb5ab98

sparc architecture (Sun SPARC/UltraSPARC)

http://security.debian.org/pool/updat...bgnutls13-dbg_1.4.4-3+etch1_sparc.deb
Size/MD5 checksum: 491030 26a5ca2cb1de39a51c22e90d3894ee87
http://security.debian.org/pool/updat...3/libgnutls13_1.4.4-3+etch1_sparc.deb
Size/MD5 checksum: 271018 4fc9a17eb374885cf809575bcecbe8a9
http://security.debian.org/pool/updat...13/gnutls-bin_1.4.4-3+etch1_sparc.deb
Size/MD5 checksum: 169546 a717fb3d1c0cf0b28069693d6da91495
http://security.debian.org/pool/updat...libgnutls-dev_1.4.4-3+etch1_sparc.deb
Size/MD5 checksum: 378820 7d307f07e38974f276b189eb90599161

-- Debian GNU/Linux unstable alias sid --

Reportedly, the problem will be fixed soon.

Original Advisory:
http://www.debian.org/security/2008/dsa-1581

Other References:
SA30287:
http://secunia.com/advisories/30287/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Subdreamer Light Global Variables SQL Injection Vulnerability // 34 views
2. Trend Micro ServerProtect Multiple Buffer Overflow Vulnerabilities // 31 views
3. Apple Mac OS X Security Update Fixes Multiple Vulnerabilities // 26 views
4. Sun Java System Web Proxy Server FTP Subsystem Buffer Overflow // 25 views
5. CA ARCserve Backup Multiple Vulnerabilities // 25 views
6. Red Hat update for cups // 21 views
7. FUJITSU Interstage Products Apache Tomcat Security Bypass // 20 views
8. CUPS Multiple Vulnerabilities // 20 views
9. Built2go Real Estate Listings "event_id" SQL Injection // 19 views
10. Gentoo Portage Insecure Python Module Search Path Security Issue // 18 views