Red Hat Security AdvisoryRHSA-2014:0246
gnutls security update
Released 2014-03-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) gnutls-2.8.5-13.el6_5, gnutls-utils-2.8.5-13.el6_5
- Red Hat Enterprise Linux Desktop Optional (v. 6) gnutls-2.8.5-13.el6_5, gnutls-devel-2.8.5-13.el6_5, gnutls-guile-2.8.5-13.el6_5
- Red Hat Enterprise Linux HPC Node (v. 6) gnutls-2.8.5-13.el6_5, gnutls-utils-2.8.5-13.el6_5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) gnutls-2.8.5-13.el6_5, gnutls-devel-2.8.5-13.el6_5, gnutls-guile-2.8.5-13.el6_5
- Red Hat Enterprise Linux Server (v. 6) gnutls-2.8.5-13.el6_5, gnutls-2.8.5-13.el6_5.ppc, gnutls-devel-2.8.5-13.el6_5 +2
- Red Hat Enterprise Linux Server Optional (v. 6) gnutls-2.8.5-13.el6_5, gnutls-guile-2.8.5-13.el6_5, gnutls-guile-2.8.5-13.el6_5.ppc
- Red Hat Enterprise Linux Workstation (v. 6) gnutls-2.8.5-13.el6_5, gnutls-devel-2.8.5-13.el6_5, gnutls-utils-2.8.5-13.el6_5
- Red Hat Enterprise Linux Workstation Optional (v. 6) gnutls-2.8.5-13.el6_5, gnutls-guile-2.8.5-13.el6_5
Fixes 1 record
Priority MEDIUM 49
lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.2986 · Published 2014-03-06 · Partial fix CWE-310
