GnuTLS has been patched to ensure proper parsing of session ids during the
TLS/SSL handshake. Additionally three issues inherited from libtasn1 have
been fixed.
Further information is available at
http://www.gnutls.org/security.html#GNUTLS-SA-2014-3
#880730 #880910
Cross- CVE-2014-3466 CVE-2014-3467 CVE-2014-3468
CVE-2014-3469
Affected Products:
SUSE Linux Enterprise Server 10 SP4 LTSS
SUSE Linux Enterprise Server 10 SP3 LTSS
https://www.suse.com/security/cve/CVE-2014-3466.html
https://www.suse.com/security/cve/CVE-2014-3467.html
https://www.suse.com/security/cve/CVE-2014-3468.html
https://www.suse.com/security/cve/CVE-2014-3469.html
https://scc.suse.com:443/patches/
https://scc.suse.com:443/patches/
Get the latest Linux and open source security news straight to your inbox.