File _patchinfo of Package patchinfo.2617
<patchinfo> <issue id="865804" tracker="bnc">VUL-0: CVE-2014-0092: gnutls: insufficient X.509 certificate verification</issue> <issue id="CVE-2014-0092" tracker="cve" /> <category>security</category> <rating>critical</rating> <packager>shawn2012</packager> <description> The gnutls library was updated to fix SSL certificate validation. Remote man-in-the-middle attackers were able to make the verification believe that a SSL certificate is valid even though it was not. </description> <summary>gnutls: fixed SSL certificate validation</summary> </patchinfo>