该漏洞存在于 FreeBSD 的 ELF 映像加载器中，涉及 setuid 二进制文件的 ASLR 优先标志处理。在计算 PIE 基地址的代码执行之后，清除每个进程的 ASLR 偏好标志，而非之前。因此，当基地址被选择时，用户请求的 ASLR 禁用仍然有效。非特权本地用户可以通过在 execve(2) 之前调用 procctl(2) 来为 setuid PIE 二进制文件禁用 ASLR。这会显著简化该二进制中任何单独内存损坏漏洞的利用。攻击者可利用此漏洞绕过地址空间布局随机化（ASLR）保护，从而更容易地利用其他内存破坏漏洞。影响产品为 FreeBSD 操作系统。厂商已发布补丁，建议立即更新。目前无在野利用证据。

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.