New GnuTLS buffer overflow

by
in security on (#3ND)
story imageAnother week, another buffer overflow in a crypto library! This time, GnuTLS is the culprit as it misses the length checks for the session ID in the ServerHello message. Because most server applications choose OpenSSL over GnuTLS, the list of affected packages is actually rather small - but make sure your systems are up to date regardless.

That's the problem with... (Score: 1)

by fatphil@pipedot.org on 2014-06-05 21:16 (#20Y)

... upgrading

ii libgnutls26 2.8.6-1+squeeze3 the GNU TLS library - runtime library
Post Comment
Subject
Comment
Captcha
73, 57 or 78: which of these is the smallest?