Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

Gentoo: GLSA 200901-10 Normal: GnuTLS Certificate Spoofing Issue

gentoo
Calendar Grey January 14, 2009
Scroller Gentoo
The GnuTLS software has encountered a certificate validation issue that might enable denial-of-service exploits. It is recommended to apply updates as per the advisory GLSA 202301-25.
A certificate validation error in GnuTLS might allow for spoofing attacks.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200901-10
~                                             https://security.gentoo.org/

~   Severity: Normal
~      Title: GnuTLS: Certificate validation error
~       Date: January 14, 2009
~       Bugs: #245850
~         ID: 200901-10


Synopsis
=======
A certificate validation error in GnuTLS might allow for spoofing
attacks.

Background
=========
GnuTLS is an open-source implementation of TLS 1.0 and SSL 3.0.

Affected packages
================
~     -------------------------------------------------------------------
~      Package          /  Vulnerable  /                      Unaffected
~     -------------------------------------------------------------------
~   1  net-libs/gnutls     < 2.4.1-r2                        >= 2.4.1-r2

==========
Martin von Gagern reported that the _gnutls_x509_verify_certificate()
function in lib/x509/verify.c trusts certificate chains in which the...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory update gentoo gnutls normal certificate issue spoofing attack

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory update gentoo gnutls normal certificate issue spoofing attack

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround