New TLS Attack Takes the S out of HTTPS
Vulnerability affects many Linux web servers
How safe is your encrypted web session?
Security experts have uncovered a bug in the GnuTLS library that would allow an attacker to launch a man-in-the-middle attack to hijack a secure connection with a web server that is using the (HTTPS) protocol. According to the Common Vulnerabilities and Exposures project (CVE-2014-0092), "lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate."
GnuTLS is an open source library that provides applications with access to Secure Sockets Layer (SSL) and Transport Layer Security (TLS) services. The GnuTLS package is used widely throughout the Linux world and is included by default with many popular Linux distributions. The GnuTLS project advises users to "upgrade to the latest GnuTLS version (3.2.12 or 3.1.22), or apply the patch for GnuTLS 2.12.x."
Issue 240/2020
Buy this issue as a PDF
News
-
Ubuntu 20.10 now supports Raspberry Pi
Ubuntu 20.10 is the first release from Canonical to support the Raspberry Pi single board computer.
-
A New Linux Distribution has been Released
Emperor-OS is a new Linux distribution focused on programming, developing, and data science.
-
Ubuntu Groovy Gorilla Beta Available
The beta version for Ubuntu’s latest release is now available for testing.
-
Microsoft is Finally Set to Release Edge Browser for Linux
Chromium-based MS Edge browser will soon be available for testing on Linux.
-
Lenovo Now Offering Ubuntu 20.04 as an Option
Lenovo is making good on its promise to support Linux as a pre-install option.
-
Linux Deepin 20 Released
One of the most beautiful Linux distributions on the market has been refreshed.
-
A New Version of Zorin OS is Now Available
Fan-favorite, Zorin OS 15.3 is officially available.
-
Lenovo Now Offering Fedora Linux as an Option
Lenovo is making good on their Linux promise by adding Fedora into the mix.
-
System76 Launches New High-End Laptop
System76 has unleashed a beast of a mobile workstation.
-
Mozilla Lays Off Staff, Receives More Cash
In a restructuring move, Mozilla lays off 250 employees, but then inks large deal with Google.