Red Hat Security AdvisoryRHSA-2010:0167
gnutls security update
Released 2010-03-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 gnutls-1.0.20-4.el4_8.7, gnutls-1.0.20-4.el4_8.7.i386, gnutls-1.0.20-4.el4_8.7.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 gnutls-1.0.20-4.el4_8.7, gnutls-1.0.20-4.el4_8.7.i386, gnutls-devel-1.0.20-4.el4_8.7 +1
- Red Hat Enterprise Linux ES version 4 gnutls-1.0.20-4.el4_8.7, gnutls-1.0.20-4.el4_8.7.i386, gnutls-1.0.20-4.el4_8.7.ia64 +3
- Red Hat Enterprise Linux WS version 4 gnutls-1.0.20-4.el4_8.7, gnutls-1.0.20-4.el4_8.7.i386, gnutls-1.0.20-4.el4_8.7.ia64 +3
Fixes 2 records
Priority CRITICAL 91
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.87264 · Published 2009-11-09 · Fixed in 7.0.10, 6.0.32 +1 CWE-300
Priority LOW 38
The gnutls_x509_crt_get_serial function in the GnuTLS library before 1.2.1, when running on big-endian, 64-bit platforms, calls the asn1_read_value with a pointer to the wrong data type and the wrong length value, which…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02944 · Published 2010-03-26 · Fixed CWE-119
