Skip to content
OpenAdvisories
Unscored DLA-180-1 3 CVEs

gnutls26 - security update

Published Mar 25, 2015 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 gnutls26 2.8.6-1+squeeze5

Vulnerabilities 3

  • Unscored —

    GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-mi…

  • Unscored —

    GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the cer…

  • Unscored —

    GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate.