bash and apt vulnerabilities
Recently discovered vulnerabilities in bash and APT are low risk for VyOS, since it doesn’t use CGI scripts written in bash and APT is not normally used for upg...
Category: VyOS Platform Blog | security (4)
CVE-2014-4607
There is a vulnerability in LZO implementation discovered recently.
OpenSSL vulnerabilities
As you should already know, several security vulnerabilities in OpenSSL were discovered recently.
GNUTLS-SA-2014-3
A security issue in GnuTLS (GNUTLS-SA-2014-3) can cause client memory corruption if the server sends specially crafted ServerHello.
CVE-2014-0160
VyOS 1.0.x uses OpenSSL 0.9.8o, and thus is not affected by CVE-2014-0160. No action is needed.
GNUTLS-SA-2014-2
In a nutshell: nothing really uses it in VyOS so we think it’s not enough to trigger maintenance release.
