Red Hat Security AdvisoryRHSA-2012:0429
gnutls security update
Released 2012-03-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) gnutls-2.8.5-4.el6_2.2, gnutls-utils-2.8.5-4.el6_2.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) gnutls-2.8.5-4.el6_2.2, gnutls-devel-2.8.5-4.el6_2.2, gnutls-guile-2.8.5-4.el6_2.2
- Red Hat Enterprise Linux HPC Node (v. 6) gnutls-2.8.5-4.el6_2.2, gnutls-utils-2.8.5-4.el6_2.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) gnutls-2.8.5-4.el6_2.2, gnutls-devel-2.8.5-4.el6_2.2, gnutls-guile-2.8.5-4.el6_2.2
- Red Hat Enterprise Linux Server (v. 6) gnutls-2.8.5-4.el6_2.2, gnutls-2.8.5-4.el6_2.2.ppc, gnutls-devel-2.8.5-4.el6_2.2 +2
- Red Hat Enterprise Linux Server Optional (v. 6) gnutls-2.8.5-4.el6_2.2, gnutls-guile-2.8.5-4.el6_2.2, gnutls-guile-2.8.5-4.el6_2.2.ppc
- Red Hat Enterprise Linux Workstation (v. 6) gnutls-2.8.5-4.el6_2.2, gnutls-devel-2.8.5-4.el6_2.2, gnutls-utils-2.8.5-4.el6_2.2
- Red Hat Enterprise Linux Workstation Optional (v. 6) gnutls-2.8.5-4.el6_2.2, gnutls-guile-2.8.5-4.el6_2.2
Fixes 2 records
Priority LOW 30
gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04155 · Published 2012-03-26 · Partial fix CWE-310
Priority LOW 24
Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.023 · Published 2011-12-08 · Partial fix CWE-119
