Solution
Please Install the Updated Packages.
Insight
The gnutls library was updated to fix SSL certificate validation. Remote man-in-the-middle attackers were able to make the verification believe that a SSL certificate is valid even though it was not. Also the TLS-CBC timing attack vulnerability was fixed.
Affected
gnutls on openSUSE 11.4
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2013-1619, CVE-2014-0092 -
CVSS Base Score: 5.8
AV:N/AC:M/Au:N/C:P/I:P/A:N
Related Vulnerabilities