The GnuTLS bug is being joined at the hip to the recent Apple’s infamous goto fail bug. Experts hoping to stem off confusion say the two vulnerabilities are different despite having the same consequences. In both cases, an attacker with man-in-the-middle positioning can intercept traffic and introduce an invalid digital certificate. The problem, she said, is related to variable typing and an improper mixing of error codes that led to this mess. The bug was uncovered during a recent audit requested by Linux distributor Red Hat.
Source: https://threatpost.com/goto-aside-gnutls-and-apple-bugs-are-not-the-same/104626/