For gnutls? I believe it was this one: https://nvd.nist.gov/vuln/detail/CVE-2020... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

stackghost on Nov 28, 2024 | parent | context | favorite | on: Emacs arbitrary code execution and how to avoid it

For gnutls? I believe it was this one: https://nvd.nist.gov/vuln/detail/CVE-2020-13777

It was not a "downgrade attack", it was passive cleartext recovery.

worthless-trash on Nov 29, 2024 [–]

Ah, my mistake, thats why I couldn't find it. Thanks for the link.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact