Lucene search

K
suseSuseSUSE-SU-2017:0304-1
HistoryJan 27, 2017 - 10:09 p.m.

Security update for gnutls (important)

2017-01-2722:09:56
lists.opensuse.org
43

0.577 Medium

EPSS

Percentile

97.4%

This update for gnutls fixes the following issues:

  • Malformed asn1 definitions could cause a segmentation fault in the asn1
    definition parser (bsc#961491).
  • CVE-2016-8610: Remote denial of service in SSL alert handling
    (bsc#1005879).
  • CVE-2017-5335: Decoding a specially crafted OpenPGP certificate could
    have lead to heap and stack overflows (bsc#1018832).
  • CVE-2017-5336: Decoding a specially crafted OpenPGP certificate could
    have lead to heap and stack overflows (bsc#1018832).
  • CVE-2017-5337: Decoding a specially crafted OpenPGP certificate could
    have lead to heap and stack overflows (bsc#1018832).