Red Hat Security AdvisoryRHSA-2010:0166
gnutls security update
Released 2010-03-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) gnutls-1.4.1-3.el5_4.8, gnutls-1.4.1-3.el5_4.8.i386, gnutls-1.4.1-3.el5_4.8.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) gnutls-1.4.1-3.el5_4.8, gnutls-1.4.1-3.el5_4.8.i386, gnutls-utils-1.4.1-3.el5_4.8 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) gnutls-1.4.1-3.el5_4.8, gnutls-devel-1.4.1-3.el5_4.8, gnutls-devel-1.4.1-3.el5_4.8.i386
Fixes 2 records
Priority CRITICAL 91
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.87264 · Published 2009-11-09 · Fixed in 7.0.10, 6.0.32 +1 CWE-300
Priority LOW 30
The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.0427 · Published 2009-07-30 · Fixed CWE-295
