Mandriva Linux Security Advisory : gnutls (MDVSA-2013:040)
Medium Nessus Plugin ID 66054
SynopsisThe remote Mandriva Linux host is missing one or more security updates.
DescriptionNadhem Alfardan and Kenny Paterson devised an attack that recovers some bits of the plaintext of a GnuTLS session that utilizes that CBC ciphersuites, by using timing information (CVE-2013-1619).
The gnutls package has been updated to latest 3.0.28 version to fix above problem.
SolutionUpdate the affected packages.