Serious Security: GnuTLS follows OpenSSL, fixes timing attack bug
Conditional code considered cryptographically counterproductive.
Conditional code considered cryptographically counterproductive.
Company transcribed ultra-personal conversations, didn’t secure them. Criminal stole them, then extorted thousands of vulnerable patients.
It’s a bug fix for a bug fix. A memory leak was turned into a double-free that has now been…