Lucene search

K
suseSuseSUSE-SU-2014:0319-1
HistoryMar 04, 2014 - 1:04 a.m.

Security update for gnutls (critical)

2014-03-0401:04:17
lists.opensuse.org
16

0.075 Low

EPSS

Percentile

93.4%

The GnuTLS library received a critical security fix and
other updates:

  • CVE-2014-0092: The X.509 certificate verification had
    incorrect error handling, which could lead to broken
    certificates marked as being valid.
  • CVE-2009-5138: A verification problem in handling V1
    certificates could also lead to V1 certificates incorrectly
    being handled.

Additionally a memory leak in PSK authentication has been
fixed (bnc#835760).