Skip to content
OpenAdvisories
Unscored RHSA-2014:0247 2 CVEs

Red Hat Security Advisory: gnutls security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client gnutls 0:1.4.1-14.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client gnutls-debuginfo 0:1.4.1-14.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client gnutls-utils 0:1.4.1-14.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client_workstation gnutls 0:1.4.1-14.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client_workstation gnutls-debuginfo 0:1.4.1-14.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client_workstation gnutls-devel 0:1.4.1-14.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server gnutls 0:1.4.1-14.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server gnutls-debuginfo 0:1.4.1-14.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server gnutls-devel 0:1.4.1-14.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server gnutls-utils 0:1.4.1-14.el5_10

Vulnerabilities 2

  • Unscored —
    CVE-2009-5138

    GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificat…

  • Unscored —
    CVE-2014-0092 EPSS 30%

    lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when veri…

    gnutls28 gnutls26 Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1069301
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1069865
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0247.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-5138
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-5138
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-5138
  • report
    https://access.redhat.com/security/cve/CVE-2014-0092
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0092
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0092