Mike Renlund A recently discovered bug in the GnuTLS cryptographic code library puts users of Linux and hundreds of other open source packages at risk of surreptitious malware attacks until they incorporate a fix developers quietly pushed out late last week. Maliciously configured servers can exploit the bug by sending malformed data to devices as they establish encrypted HTTPS connections.