Lucene search

K
suseSuseSUSE-SU-2014:0445-1
HistoryMar 25, 2014 - 7:04 p.m.

Security update for gnutls (important)

2014-03-2519:04:38
lists.opensuse.org
19

0.075 Low

EPSS

Percentile

94.1%

The GNUTLS library received a critical security fix and
other updates:

  • CVE-2014-0092: The X.509 certificate verification had
    incorrect error handling, which could lead to broken
    certificates marked as being valid.
  • CVE-2009-5138: A verification problem in handling V1
    certificates could also lead to V1 certificates incorrectly
    being handled.

Additionally, a memory leak in PSK authentication was
fixed. (bnc#835760)

Security Issues references: