gnutls-1.4.1-3.5.1AXS3

エラータID: AXSA:2009-384:01

Release date: 
Friday, August 28, 2009 - 16:44
Subject: 
gnutls-1.4.1-3.5.1AXS3
Affected Channels: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
High
Description: 

GnuTLS is a project that aims to develop a library which provides a secure layer, over a reliable transport layer. Currently the GnuTLS library implements the proposed standards by the IETF's TLS (Transport Layer Security) working group.
Fixed bugs;
CVE-2009-2730
libgnutls in GnuTLS before 2.8.2 does not properly handle a 0 character in a domain name in the subject's (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

Solution: 

Update packages.

CVEs: 
CVE-2009-2730
libgnutls in GnuTLS before 2.8.2 does not properly handle a '\0' character in a domain name in the subject's (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.


Additional Info: 

N/A

Download: 

SRPMS
  1. gnutls-1.4.1-3.5.1AXS3.src.rpm
    MD5: 9ece35ba063a3dfe388313de44eaed68
    SHA-256: 56a07b91190d3bdbb979b967f788c38f49d22997cc6d44870fe3f18dc301fc2f
    Size: 3.87 MB

Asianux Server 3 for x86
  1. gnutls-1.4.1-3.5.1AXS3.i386.rpm
    MD5: a3da8b1dd962b7d69323081cb9974587
    SHA-256: 6330eb5f3223541f7bfc00131031578f164976fac69fdecd1e58cd676bdd6abd
    Size: 370.99 kB
  2. gnutls-devel-1.4.1-3.5.1AXS3.i386.rpm
    MD5: 6840d091390e1c1f909a7558f0153cc0
    SHA-256: 9835b9b286c4035f4b6a5cfa11960e3ef017b4309e023c31fa2cf3a07de56d1b
    Size: 922.85 kB

Asianux Server 3 for x86_64
  1. gnutls-1.4.1-3.5.1AXS3.x86_64.rpm
    MD5: f6439497112b506f293552a1abc0330e
    SHA-256: 5a8e3b28ea78c518386112729894b26c6ae3b10ff558508f6f226f63e3490d57
    Size: 384.39 kB
  2. gnutls-devel-1.4.1-3.5.1AXS3.x86_64.rpm
    MD5: f755499426590730bb73f48a4c663e36
    SHA-256: 63cd38a70ea8dbcaecd55f0f3e04a597410da8c7ee89a5d2fb45e3ce701da1d3
    Size: 940.79 kB