[4693] in Privacy_Forum
[ PRIVACY Forum ] Critical new bug in GnuTLS crypto library leaves
daemon@ATHENA.MIT.EDU (PRIVACY Forum mailing list)
Tue Jun 3 13:08:28 2014
Date: Tue, 3 Jun 2014 09:45:52 -0700
To: privacy-list@vortex.com
Message-ID: <20140603164552.GB5160@vortex.com>
MIME-Version: 1.0
Content-Disposition: inline
From: PRIVACY Forum mailing list <privacy@vortex.com>
Reply-To: PRIVACY Forum mailing list <privacy@vortex.com>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: privacy-bounces+privacy-forum=mit.edu@vortex.com
Content-Transfer-Encoding: 8bit
Critical new bug in GnuTLS crypto library leaves Linux, apps open to
drive-by attacks
(Ars Technica): http://arstechnica.com/security/2014/06/critical-new-bug-in-crypto-library-leaves-linux-apps-open-to-drive-by-attacks/
"A recently discovered bug in the GnuTLS cryptographic code library
puts users of Linux and hundreds of other open source packages at risk
of surreptitious malware attacks until they incorporate a fix
developers quietly pushed out late last week. Maliciously configured
servers can exploit the bug by sending malformed data to devices as
they establish encrypted HTTPS connections. Devices that rely on an
unpatched version of GnuTLS can then be remotely hijacked by malicious
code of the attacker's choosing, security researchers who examined the
fix warned."
- - -
--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
privacy mailing list
http://lists.vortex.com/mailman/listinfo/privacy
