GnuTLS: Multiple vulnerabilities

GnuTLS: Multiple vulnerabilities Multiple vulnerabilities have been discovered in GnuTLS, the worst of which could lead to arbitrary code execution. gnutls June 13, 2014 June 13, 2014: 1 501282 503394 511840 remote 2.12.23-r6 2.12.23-r6

GnuTLS is an Open Source implementation of the TLS 1.2 and SSL 3.0 protocols.

Multiple vulnerabilities have been discovered in GnuTLS. Please review the CVE identifiers referenced below for details.

A remote attacker could utilize multiple vectors to spoof arbitrary SSL servers via a crafted certificate, execute arbitrary code or cause a Denial of Service condition.

There is no known workaround at this time.

All GnuTLS users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=net-libs/gnutls-2.12.23-r6"

CVE-2014-0092 CVE-2014-1959 CVE-2014-3465 CVE-2014-3466 BlueKnight Zlogene