Post by bot on Mar 5, 2014 23:08:26 GMT -5
GnuTLS Releases Security Update
03/05/2014 11:56 AM EST
Original release date: March 05, 2014
GnuTLS has released security updates to address a vulnerability affecting certificate verification functions. An attacker could use a specially crafted X509 certificate to bypass validation checks, impersonate legitimate web sites or services, and perform man-in-the-middle attacks.
Many Linux distributions and other software which use GnuTLS are affected.
Updates available include:
• GnuTLS 2.12.x patch application
• GnuTLS 3.2.12 for the current stable branch
• GnuTLS 3.1.22 for the previous stable branch
www.us-cert.gov/ncas/current-activity/2014/03/05/GnuTLS-Releases-Security-Update
03/05/2014 11:56 AM EST
Original release date: March 05, 2014
GnuTLS has released security updates to address a vulnerability affecting certificate verification functions. An attacker could use a specially crafted X509 certificate to bypass validation checks, impersonate legitimate web sites or services, and perform man-in-the-middle attacks.
Many Linux distributions and other software which use GnuTLS are affected.
Updates available include:
• GnuTLS 2.12.x patch application
• GnuTLS 3.2.12 for the current stable branch
• GnuTLS 3.1.22 for the previous stable branch
www.us-cert.gov/ncas/current-activity/2014/03/05/GnuTLS-Releases-Security-Update
