gnutls26: two vulnerabilities
| Package(s): | gnutls26 | CVE #(s): | CVE-2015-0282 CVE-2015-0294 | ||||||||||||||||||||||||||||||||
| Created: | March 16, 2015 | Updated: | July 30, 2015 | ||||||||||||||||||||||||||||||||
| Description: | From the Debian advisory:
CVE-2015-0282: GnuTLS does not verify the RSA PKCS #1 signature algorithm to match the signature algorithm in the certificate, leading to a potential downgrade to a disallowed algorithm without detecting it. CVE-2015-0294: It was reported that GnuTLS does not check whether the two signature algorithms match on certificate import. | ||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||