New TLS Attack Takes the S out of HTTPS
Vulnerability affects many Linux web servers
How safe is your encrypted web session?
Security experts have uncovered a bug in the GnuTLS library that would allow an attacker to launch a man-in-the-middle attack to hijack a secure connection with a web server that is using the (HTTPS) protocol. According to the Common Vulnerabilities and Exposures project (CVE-2014-0092), "lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate."
GnuTLS is an open source library that provides applications with access to Secure Sockets Layer (SSL) and Transport Layer Security (TLS) services. The GnuTLS package is used widely throughout the Linux world and is included by default with many popular Linux distributions. The GnuTLS project advises users to "upgrade to the latest GnuTLS version (3.2.12 or 3.1.22), or apply the patch for GnuTLS 2.12.x."
Issue 252/2021
Buy this issue as a PDF
News
-
GNOME 41 Has Arrived
The latest version of the GNOME desktop environment has been released with new functionality and plenty of improvements.
-
System76 Updates the 15" Pangolin with Ryzen
System76 announced they’re updating the Ryzen-powered Pangolin laptop to meet today’s need for more power.
-
KDE Plasma 5.23 Promises Plenty of Subtle Improvements
The next release of the KDE Plasma desktop includes new features, numerous improvements, and plenty of bug fixes.
-
GNOME 41 Beta is Now Available
The most popular open-source desktop environment is on the cusp of yet another new release, but don’t expect the massive changes found in the previous iteration.
-
Debian 11 “Bullseye” Now Available
The developers of Debian have released the latest version of the operating system so many distributions depend on.
-
Elementary OS 6 Odin Now Available
The developers of elementary OS have released their latest iteration which is all-in on Flatpaks and all about the user experience.
-
Kubuntu Focus Team Announces High-Performance Focus XE
The team behind the KDE-powered Linux laptops is now offering an ultra-portable laptop that doesn't skimp on performance.
-
Solus 4.3 Available for Download and Installation
The latest iteration from the Solus developers is out with kernel 5.13 and plenty of new features, bug fixes, and new hardware support.
-
Steam Deck Linux-Powered Gaming System Set to Take Over the Handheld World
A Linux and KDE-powered portable gaming platform is set to be released by Valve.
-
Linux Mint 20.2 Available and Better Than Ever
The developers of Linux Mint have gone a long way to perfecting the desktop experience.