id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
6927	gnutls-3.4.5	Fernando de Oliveira	bdubbs@…	"[ftp://ftp.gnutls.org/gcrypt/gnutls/v3.4/gnutls-3.4.5.tar.xz]

[ftp://ftp.gnutls.org/gcrypt/gnutls/v3.4/gnutls-3.4.5.tar.xz.sig]

[http://www.gnutls.org/security.html]

Only refers to version < GnuTLS 3.3.14, which is not our case.

{{{
Tag
GNUTLS-SA-2015-4

...

Recommendation: Upgrade to GnuTLS 3.3.14, or later versions. 
}}}

[https://lists.gnupg.org/pipermail/gnutls-help/2015-September/003952.html]

{{{
[gnutls-help] gnutls 3.4.5
Nikos Mavrogiannopoulos nmav at gnutls.org
Sat Sep 12 11:57:37 CEST 2015

Hello, 
 I've just released gnutls 3.4.5. This version fixes bugs and adds
minor features to the next stable branch.


* Version 3.4.5 (released 2015-09-12)

** libgnutls: When re-importing CRLs to a trust list ensure that there
   no duplicate entries.

** certtool: Removed any arbitrary limits imposed on input file sizes
   and maximum number of certificates imported.

** certtool: Allow specifying fixed dates on CRL generation.

** gnutls-cli-debug: Added check for inappropriate fallback support
   (RFC7507).

** API and ABI modifications:
No changes since last version.

...

regards,
Nikos
}}}"	enhancement	closed	normal	7.9	BOOK	SVN	medium	fixed