OpenSSL vulnerabilities
As you should already know, several security vulnerabilities in OpenSSL were discovered recently.
Category: VyOS Platform Blog | security (4)
GNUTLS-SA-2014-3
A security issue in GnuTLS (GNUTLS-SA-2014-3) can cause client memory corruption if the server sends specially crafted ServerHello.
CVE-2014-0160
VyOS 1.0.x uses OpenSSL 0.9.8o, and thus is not affected by CVE-2014-0160. No action is needed.
GNUTLS-SA-2014-2
In a nutshell: nothing really uses it in VyOS so we think it’s not enough to trigger maintenance release.
