Bug 1162085 - security issue in gnutls (GNUTLS-SA-2014-5)
Summary: security issue in gnutls (GNUTLS-SA-2014-5)
Keywords:
Status: CLOSED DUPLICATE of bug 1162086
Alias: None
Product: Fedora
Classification: Fedora
Component: gnutls
Version: 21
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Nikos Mavrogiannopoulos
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-11-10 09:05 UTC by Nikos Mavrogiannopoulos
Modified: 2014-11-10 09:21 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2014-11-10 09:21:59 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)

Description Nikos Mavrogiannopoulos 2014-11-10 09:05:46 UTC 
from http://www.gnutls.org/security.html#GNUTLS-SA-2014-5

Sean Burford reported that the encoding of elliptic curves parameters GnuTLS 3 is vulnerable to a denial of service (heap corruption). It affects clients and servers which print information about the peer's certificate, e.g., the key ID, and can be exploited via a specially crafted X.509 certificate.
Comment 1 Fedora Update System 2014-11-10 09:06:11 UTC 
gnutls-3.3.10-1.fc21 has been submitted as an update for Fedora 21.
https://admin.fedoraproject.org/updates/gnutls-3.3.10-1.fc21
Comment 2 Nikos Mavrogiannopoulos 2014-11-10 09:21:59 UTC 

*** This bug has been marked as a duplicate of bug 1162086 ***
Note You need to log in before you can comment on or make changes to this bug.