Red Hat Security AdvisoryRHSA-2008:0982
gnutls security update
Released 2008-11-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) gnutls-1.4.1-3.el5_2.1, gnutls-1.4.1-3.el5_2.1.i386, gnutls-1.4.1-3.el5_2.1.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) gnutls-1.4.1-3.el5_2.1, gnutls-1.4.1-3.el5_2.1.i386, gnutls-utils-1.4.1-3.el5_2.1 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) gnutls-1.4.1-3.el5_2.1, gnutls-devel-1.4.1-3.el5_2.1, gnutls-devel-1.4.1-3.el5_2.1.i386
Fixes 1 record
Priority LOW 30
The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate, which allows…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01882 · Published 2008-11-13 · Fixed CWE-295
