Red Hat Security AdvisoryRHSA-2009:1232
gnutls security update
Released 2009-08-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) gnutls-1.4.1-3.el5_3.5, gnutls-1.4.1-3.el5_3.5.i386, gnutls-1.4.1-3.el5_3.5.ia64 +9
- Red Hat Enterprise Linux AS version 4 gnutls-1.0.20-4.el4_8.3, gnutls-1.0.20-4.el4_8.3.i386, gnutls-1.0.20-4.el4_8.3.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) gnutls-1.4.1-3.el5_3.5, gnutls-1.4.1-3.el5_3.5.i386, gnutls-utils-1.4.1-3.el5_3.5 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) gnutls-1.4.1-3.el5_3.5, gnutls-devel-1.4.1-3.el5_3.5, gnutls-devel-1.4.1-3.el5_3.5.i386
- Red Hat Enterprise Linux Desktop version 4 gnutls-1.0.20-4.el4_8.3, gnutls-1.0.20-4.el4_8.3.i386, gnutls-devel-1.0.20-4.el4_8.3 +1
- Red Hat Enterprise Linux ES version 4 gnutls-1.0.20-4.el4_8.3, gnutls-1.0.20-4.el4_8.3.i386, gnutls-1.0.20-4.el4_8.3.ia64 +3
- Red Hat Enterprise Linux WS version 4 gnutls-1.0.20-4.el4_8.3, gnutls-1.0.20-4.el4_8.3.i386, gnutls-1.0.20-4.el4_8.3.ia64 +3
Fixes 1 record
Priority LOW 37
libgnutls in GnuTLS before 2.8.2 does not properly handle a '\0' character in a domain name in the subject's (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-t…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02151 · Published 2009-08-12 · Fixed CWE-310
