4800 matches found
[slackware-security] gnutls
New gnutls packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/gnutls-3.6.13-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: libgnutls: Fix a DTLS-protocol regression caused by...
GnuTLS -- flaw in DTLS protocol implementation
The GnuTLS project reports: It was found that GnuTLS 3.6.3 introduced a regression in the DTLS protocol implementation. This caused the DTLS client to not contribute any randomness to the DTLS negotiation breaking the security guarantees of the DTLS protocol...
gnutls:gnutls_psk_client_fuzzer: Use-of-uninitialized-value in __gmpz_clear
Project: https://gitlab.com/gnutls/gnutls.git Detailed Report: https://oss-fuzz.com/testcase?key=6296663875649536 Project: gnutls Fuzzing Engine: libFuzzer Fuzz Target: gnutlspskclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...
gnutls:gnutls_x509_crl_parser_fuzzer: Use-of-uninitialized-value in print_crl
Project: https://gitlab.com/gnutls/gnutls.git Detailed Report: https://oss-fuzz.com/testcase?key=5639123231834112 Project: gnutls Fuzzing Engine: libFuzzer Fuzz Target: gnutlsx509crlparserfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
Critical Photon OS Security Update - PHSA-2020-0285
Updates of 'apache-tomcat' packages of Photon OS have been released...
CVE-2013-7098
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection...
DEBIAN-CVE-2013-7098
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection...
CVE-2013-7098
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection...
Heap overflow
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection...
CVE-2013-7098
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection...
CVE-2013-7098
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection...
CVE-2013-7098
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection...
CVE-2013-7098
OpenConnect VPN client with GnuTLS before 5.02 is vulnerable to a heap overflow when MTU is increased on reconnection. Affected component: OpenConnect/GnuTLS stack prior to 5.02. Root cause: heap overflow due to MTU handling on reconnect. Impact is high in affected deployments per CVSS data. Reme...
USN-4233-2: GnuTLS update | Cloud Foundry
Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description USN-4233-1 disabled SHA1 being used for digital signature operations in GnuTLS. In certain network environments, certificates using SHA1 may still be in use. This update adds the...
USN-4233-1: GnuTLS update | Cloud Foundry
Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description As a security improvement, this update marks SHA1 as being untrusted for digital signature operations. Affected Cloud Foundry Products and Versions Severity is unknown unless...
gnutls:gnutls_pkcs12_key_parser_fuzzer: Global-buffer-overflow in _nettle_sec_tabselect
Project: https://gitlab.com/gnutls/gnutls.git Detailed Report: https://oss-fuzz.com/testcase?key=5143428189126656 Project: gnutls Fuzzing Engine: libFuzzer Fuzz Target: gnutlspkcs12keyparserfuzzer Job Type: libfuzzerasangnutls Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash...
CVE-2015-0294
GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate...
CVE-2015-0294
GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate...