tocsin

Alpine/gnutls: critical 9.8

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker

Action: Upgrade gnutls to 3.8.13-r0 or later.

Affected

introducedfixedlast affected
03.8.13-r0-

Fixed versions

3.8.13-r0

Sources

published · modified · JSON