Red Hat Security AdvisoryRHSA-2014:0288
gnutls security update
Released 2014-03-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS (v. 4 ELS) gnutls-1.0.20-5.el4, gnutls-1.0.20-5.el4.i386, gnutls-1.0.20-5.el4.ia64 +3
- Red Hat Enterprise Linux Compute Node EUS (v. 6.3) gnutls-2.8.5-7.el6_3.2, gnutls-utils-2.8.5-7.el6_3.2
- Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.3) gnutls-2.8.5-7.el6_3.2, gnutls-devel-2.8.5-7.el6_3.2, gnutls-guile-2.8.5-7.el6_3.2
- Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4) gnutls-2.8.5-10.el6_4.3, gnutls-devel-2.8.5-10.el6_4.3, gnutls-guile-2.8.5-10.el6_4.3
- Red Hat Enterprise Linux ES (v. 4 ELS) gnutls-1.0.20-5.el4, gnutls-1.0.20-5.el4.i386, gnutls-devel-1.0.20-5.el4 +1
- Red Hat Enterprise Linux EUS (v. 5.9 server) gnutls-1.4.1-10.el5_9.3, gnutls-1.4.1-10.el5_9.3.i386, gnutls-1.4.1-10.el5_9.3.ia64 +9
- Red Hat Enterprise Linux HPC Node EUS (v. 6.4) gnutls-2.8.5-10.el6_4.3, gnutls-utils-2.8.5-10.el6_4.3
- Red Hat Enterprise Linux Long Life (v. 5.3 server) gnutls-1.4.1-3.el5_3.6, gnutls-1.4.1-3.el5_3.6.i386, gnutls-1.4.1-3.el5_3.6.ia64 +6
- Red Hat Enterprise Linux Long Life (v. 5.6 server) gnutls-1.4.1-7.el5_6.1, gnutls-1.4.1-7.el5_6.1.i386, gnutls-1.4.1-7.el5_6.1.ia64 +6
- Red Hat Enterprise Linux Server AUS (v. 6.2) gnutls-2.8.5-4.el6_2.3, gnutls-devel-2.8.5-4.el6_2.3, gnutls-utils-2.8.5-4.el6_2.3
- Red Hat Enterprise Linux Server EUS (v. 6.3) gnutls-2.8.5-7.el6_3.2, gnutls-2.8.5-7.el6_3.2.ppc, gnutls-devel-2.8.5-7.el6_3.2 +2
- Red Hat Enterprise Linux Server EUS (v. 6.4) gnutls-2.8.5-10.el6_4.3, gnutls-2.8.5-10.el6_4.3.ppc, gnutls-devel-2.8.5-10.el6_4.3 +2
- Red Hat Enterprise Linux Server Optional AUS (v. 6.2) gnutls-2.8.5-4.el6_2.3, gnutls-guile-2.8.5-4.el6_2.3
- Red Hat Enterprise Linux Server Optional EUS (v. 6.3) gnutls-2.8.5-7.el6_3.2, gnutls-guile-2.8.5-7.el6_3.2, gnutls-guile-2.8.5-7.el6_3.2.ppc
- Red Hat Enterprise Linux Server Optional EUS (v. 6.4) gnutls-2.8.5-10.el6_4.3, gnutls-guile-2.8.5-10.el6_4.3, gnutls-guile-2.8.5-10.el6_4.3.ppc
Fixes 1 record
Priority MEDIUM 49
lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.2986 · Published 2014-03-06 · Partial fix CWE-310
