[Bug 1510163] Re: Poodle TLS1.0 issue in Trusty (and Precise)

[Mathew Hodson]

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3566

** Changed in: gnutls26 (Ubuntu)
   Importance: Undecided => High

** Tags added: poodle

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gnutls26 in Ubuntu.
https://bugs.launchpad.net/bugs/1510163

Title:
  Poodle TLS1.0 issue in Trusty (and Precise)

Status in gnutls26 package in Ubuntu:
  New

Bug description:
  This issue is present in Trusty and Precise with the stock main gnutls
  - https://community.qualys.com/blogs/securitylabs/2014/12/08/poodle-
  bites-tls

  If I switch cups to use gnutls28-dev on 14.04 the issue appears to go
  away according to ssllabs.   My test case is cups with SSL on.

  [1] http://pastebin.ubuntu.com/12970857/

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/1510163/+subscriptions