GnuTLS出大包 - Linux

Table of Contents

http://arstechnica.com/security/2014/03/critical-crypto-bug-leaves-linux-h

相比之下iOS幾個星期前的gotofail真的不算甚麼orz

套件有在用GnuTLS的朋友今天可能要注意一下自己的套件有沒有放Security Update


--
To kill for yourself is murder.
To kill for your government is heroic.
To kill for entertainment is harmless.


--

All Comments

Eden avatarEden2014-03-07
Debian DSA-2869 修正
Necoo avatarNecoo2014-03-11
filezilla,chrome,lynx,curl,empathy,svn 都有用libgnutls
Olga avatarOlga2014-03-12
ubuntu都還再2.12.32
Robert avatarRobert2014-03-17
結果ubuntu早就把這個bug補起來了,剛剛在source發現這個
patch
Joseph avatarJoseph2014-03-17
大多distro只要還有support都會直接打patch
而不是更新版本
Donna avatarDonna2014-03-18
CVE-2014-0092,貌似昨天才放上去的http://ppt.cc/eMu~