https://bugzilla.novell.com/show_bug.cgi?id=861907 https://bugzilla.novell.com/show_bug.cgi?id=861907#c1 Stefan Bühler changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |stbuehler@web.de --- Comment #1 from Stefan Bühler 2014-02-06 11:08:36 UTC --- Upstream commit https://gitorious.org/gnutls/gnutls/commit/1667d2eecd4094a239db9f5ae54990d4c... (gnutls_3_2_2-29-g1667d2e) broke inflating (it allocates a buffer with the incoming record's size, which has some overhead but not enough to ensure inflate has always enough space). Upstream fixed it in https://gitorious.org/gnutls/gnutls/commit/172ae00887559fa5ba9a3bdc41d9eccb4... (gnutls_3_2_6-116-g172ae00). This means all releases >= 3.2.3 and <= 3.2.6 are broken. Proposed fix: revert 1667d2eecd4094a239db9f5ae54990d4c270c52a, as it is closer to the code in 3.2.4 See: https://build.opensuse.org/request/show/221106 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=861907 https://bugzilla.novell.com/show_bug.cgi?id=861907#c2 Benjamin Brunner changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|maintenance@opensuse.org | --- Comment #2 from Benjamin Brunner 2014-02-06 12:29:12 CET --- Thanks. I've started an update. See openSUSE:Maintenance:2541 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=861907 https://bugzilla.novell.com/show_bug.cgi?id=861907#c4 --- Comment #4 from Swamp Workflow Management 2014-02-13 10:04:32 UTC --- openSUSE-RU-2014:0232-1: An update that has one recommended fix can now be installed. Category: recommended (low) Bug References: 861907 CVE References: Sources used: openSUSE 13.1 (src): gnutls-3.2.4-2.9.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.