Test ID:	1.3.6.1.4.1.25623.1.1.13.2014.062.01
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2014-062-01)
Summary:	The remote host is missing an update for the 'gnutls' package(s) announced via the SSA:2014-062-01 advisory.
Description:	Summary: The remote host is missing an update for the 'gnutls' package(s) announced via the SSA:2014-062-01 advisory. Vulnerability Insight: New gnutls packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/gnutls-3.1.22-i486-1_slack14.1.txz: Upgraded. Fixed a security issue where a specially crafted certificate could bypass certificate validation checks. For more information, see: [link moved to references] (* Security fix *) +--------------------------+ Thanks to mancha for backporting the patch for Slackware 13.0, 13.1, 13.37, and 14.0! Affected Software/OS: 'gnutls' package(s) on Slackware 13.0, Slackware 13.1, Slackware 13.37, Slackware 14.0, Slackware 14.1, Slackware current. Solution: Please install the updated package(s). CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0092 BugTraq ID: 65919 http://www.securityfocus.com/bid/65919 Debian Security Information: DSA-2869 (Google Search) http://www.debian.org/security/2014/dsa-2869 RedHat Security Advisories: RHSA-2014:0246 http://rhn.redhat.com/errata/RHSA-2014-0246.html RedHat Security Advisories: RHSA-2014:0247 http://rhn.redhat.com/errata/RHSA-2014-0247.html RedHat Security Advisories: RHSA-2014:0288 http://rhn.redhat.com/errata/RHSA-2014-0288.html RedHat Security Advisories: RHSA-2014:0339 http://rhn.redhat.com/errata/RHSA-2014-0339.html http://secunia.com/advisories/56933 http://secunia.com/advisories/57103 http://secunia.com/advisories/57204 http://secunia.com/advisories/57254 http://secunia.com/advisories/57260 http://secunia.com/advisories/57274 http://secunia.com/advisories/57321 SuSE Security Announcement: SUSE-SU-2014:0319 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00000.html SuSE Security Announcement: SUSE-SU-2014:0320 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html SuSE Security Announcement: SUSE-SU-2014:0321 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00002.html SuSE Security Announcement: SUSE-SU-2014:0322 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00003.html SuSE Security Announcement: SUSE-SU-2014:0323 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00004.html SuSE Security Announcement: SUSE-SU-2014:0324 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00005.html SuSE Security Announcement: SUSE-SU-2014:0445 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00020.html SuSE Security Announcement: openSUSE-SU-2014:0325 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00006.html SuSE Security Announcement: openSUSE-SU-2014:0328 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00007.html SuSE Security Announcement: openSUSE-SU-2014:0346 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00009.html http://www.ubuntu.com/usn/USN-2127-1
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.