Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 5 enterprise_linux:5::client | gnutls | 0:1.4.1-16.el5_10 |
| Red Hat · RHEL 5 enterprise_linux:5::client | gnutls-debuginfo | 0:1.4.1-16.el5_10 |
| Red Hat · RHEL 5 enterprise_linux:5::client | gnutls-utils | 0:1.4.1-16.el5_10 |
| Red Hat · RHEL 5 enterprise_linux:5::client_workstation | gnutls | 0:1.4.1-16.el5_10 |
| Red Hat · RHEL 5 enterprise_linux:5::client_workstation | gnutls-debuginfo | 0:1.4.1-16.el5_10 |
| Red Hat · RHEL 5 enterprise_linux:5::client_workstation | gnutls-devel | 0:1.4.1-16.el5_10 |
| Red Hat · RHEL 5 enterprise_linux:5::server | gnutls | 0:1.4.1-16.el5_10 |
| Red Hat · RHEL 5 enterprise_linux:5::server | gnutls-debuginfo | 0:1.4.1-16.el5_10 |
| Red Hat · RHEL 5 enterprise_linux:5::server | gnutls-devel | 0:1.4.1-16.el5_10 |
| Red Hat · RHEL 5 enterprise_linux:5::server | gnutls-utils | 0:1.4.1-16.el5_10 |
Vulnerabilities 4
-
Unscored —
Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.1…
-
Unscored —
Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote att…
-
Unscored —
The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length i…
-
Unscored —
The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent atta…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1101932
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1102022
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1102323
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1102329
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0594.json
-
report
https://access.redhat.com/security/cve/CVE-2014-3466
-
advisory
https://www.cve.org/CVERecord?id=CVE-2014-3466
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-3466
-
report
https://access.redhat.com/security/cve/CVE-2014-3467
-
advisory
https://www.cve.org/CVERecord?id=CVE-2014-3467
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-3467
-
report
https://access.redhat.com/security/cve/CVE-2014-3468
-
advisory
https://www.cve.org/CVERecord?id=CVE-2014-3468
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-3468
-
report
https://access.redhat.com/security/cve/CVE-2014-3469
-
advisory
https://www.cve.org/CVERecord?id=CVE-2014-3469
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-3469