# gnutls CVE-2014-3466

**URL:** <https://forums.suse.com/t/gnutls-cve-2014-3466/25689>\
**Category:** SLES Updates\
**Created:** [June 4, 2014, 6:14pm UTC](https://forums.suse.com/t/gnutls-cve-2014-3466/25689 "2014-06-04T18:14:59Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![creej](https://avatars.discourse-cdn.com/v4/letter/c/74df32/32.png) [@creej](https://forums.suse.com/u/creej)\
**Post date:** [June 4, 2014, 6:14pm UTC](https://forums.suse.com/t/gnutls-cve-2014-3466/25689/1 "2014-06-04T18:14:59Z")

</div>

Will there be a patched version of gnutls through online update for CVE-2014-3466 or should I patch manually?

Thanks,

Jeff

---

<div class="post-metadata">

**Author:** ![smflood](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/smflood/32/10576_2.png) [@smflood](https://forums.suse.com/u/smflood)\
**Post date:** [June 4, 2014, 7:39pm UTC](https://forums.suse.com/t/gnutls-cve-2014-3466/25689/2 "2014-06-04T19:39:57Z")

</div>

On 04/06/2014 16:24, creej wrote:  
[color=blue]

> Will there be a patched version of gnutls through online update for  
> CVE-2014-3466 or should I patch manually?[/color]

Since you have asked in a forum related to SUSE Linux Enterprise Server  
(SLES) which version(s) of SLES are you using?

## HTH.

Simon  
SUSE Knowledge Partner

* * *

## If you find this post helpful and are logged into the web interface, please show your appreciation and click on the star below. Thanks.

---

<div class="post-metadata">

**Author:** ![creej](https://avatars.discourse-cdn.com/v4/letter/c/74df32/32.png) [@creej](https://forums.suse.com/u/creej)\
**Post date:** [June 4, 2014, 8:02pm UTC](https://forums.suse.com/t/gnutls-cve-2014-3466/25689/3 "2014-06-04T20:02:24Z")

</div>

[QUOTE=smflood;21793]On 04/06/2014 16:24, creej wrote:  
[color=blue]

> Will there be a patched version of gnutls through online update for  
> CVE-2014-3466 or should I patch manually?[/color]

Since you have asked in a forum related to SUSE Linux Enterprise Server  
(SLES) which version(s) of SLES are you using?

## HTH.

Simon  
SUSE Knowledge Partner

* * *

If you find this post helpful and are logged into the web interface,  
please show your appreciation and click on the star below. Thanks.  
------------------------------------------------------------------------[/QUOTE]

Which versions you got? 🙂

Pretty much everything from SLES 9 SP3 to SLES 11 SP3.

Jeff

---

<div class="post-metadata">

**Author:** ![mikewillis](https://avatars.discourse-cdn.com/v4/letter/m/b2d939/32.png) [@mikewillis](https://forums.suse.com/u/mikewillis)\
**Post date:** [June 4, 2014, 9:38pm UTC](https://forums.suse.com/t/gnutls-cve-2014-3466/25689/4 "2014-06-04T21:38:16Z")

</div>

Patches for some products are certainly imminent:  
[http://support.novell.com/security/cve/CVE-2014-3466.html](http://support.novell.com/security/cve/CVE-2014-3466.html)  
I don’t know which versions of SLES contain versions of gnutls that are affected.

---

<div class="post-metadata">

**Author:** ![smflood](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/smflood/32/10576_2.png) [@smflood](https://forums.suse.com/u/smflood)\
**Post date:** [June 5, 2014, 1:19pm UTC](https://forums.suse.com/t/gnutls-cve-2014-3466/25689/5 "2014-06-05T13:19:28Z")

</div>

On 04/06/2014 18:04, creej wrote:  
[color=blue]

> Which versions you got? 🙂
> 
> Pretty much everything from SLES 9 SP3 to SLES 11 SP3.[/color]

Patched versions for SLES11 SP3 would appear to now be available via the  
Updates repo and possibly for download via Patch Finder (but that  
currently seems to be broken which I’ve reported).

For earlier versions of SLES you’ll either need to upgrade to SLES11 SP3  
or compile your own patched versions since versions of SLES earlier than  
SLES11 SP3 are no longer supported unless you’ve signed up to Long Term  
Service Pack Support.

## HTH.

Simon  
SUSE Knowledge Partner

* * *

## If you find this post helpful and are logged into the web interface, please show your appreciation and click on the star below. Thanks.

---

<div class="post-metadata">

**Author:** ![creej](https://avatars.discourse-cdn.com/v4/letter/c/74df32/32.png) [@creej](https://forums.suse.com/u/creej)\
**Post date:** [June 5, 2014, 10:05pm UTC](https://forums.suse.com/t/gnutls-cve-2014-3466/25689/6 "2014-06-05T22:05:16Z")

</div>

Thanks guys!
