Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 11 GnuTLS 2.6.6-3 Critical: NUL Character Handling Fix

fedora
Calendar Grey September 25, 2009
Dist Fedora Esm H88
CentOS' openssl patch addresses whitespace bugs in key parsing, enhancing encryption reliability.
This update fixes handling of NUL characters in certificate Common Name or subjectAltName fields especially in regards to comparsion to hostnames.

Summary

GnuTLS is a project that aims to develop a library which provides a secure

layer, over a reliable transport layer. Currently the GnuTLS library implements

the proposed standards by the IETF's TLS working group.

Update Information:

This update fixes handling of NUL characters in certificate Common Name or subjectAltName fields especially in regards to comparsion to hostnames.

Topics%20covered

Topics Covered

security advisory critical Fedora NUL character certificate handling

Change Log

* Wed Sep 23 2009 Tomas Mraz 2.6.6-3 - fix handling of hostname in openpgp certificates * Fri Aug 14 2009 Tomas Mraz 2.6.6-2 - fix CVE-2009-2730 - handling of NUL chars in certificate CNs and SANs

References


[ 1 ] Bug #516231 - CVE-2009-2730 gnutls: incorrect verification of SSL certificate with NUL in name (GNUTLS-SA-2009-4) https://bugzilla.redhat.com/show_bug.cgi?id=516231

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update gnutls' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: gnutls
Product: Fedora 11
Version: 2.6.6
Release: 3.fc11
URL: http://www.gnutls.org/
Summary: A TLS protocol implementation

Topics%20covered

Topics Covered

security advisory critical Fedora NUL character certificate handling

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here