CVE-2016-4456

The CVE-2016-4456 issue affects GnuTLS, specifically version 3.4.12. The vulnerability stems from how GNUTLS_KEYLOGFILE is handled via getenv(), which can allow an attacker to overwrite and corrupt arbitrary files in the filesystem. Several connected sources confirm the impact and the affected co...

CVE-2016-4456

The "GNUTLSKEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem...

Fedora 23 : gnutls (2016-c61cda2beb)

New upstream release 1343258 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Security fix for the ALT Linux 10 package gnutls30 version 3.4.13-alt1

June 7, 2016 Mikhail Efremov 3.4.13-alt1 - Updated BR for tests. - Updated to 3.4.13 CVE-2016-4456...