Описание
ELSA-2012-0428: gnutls security update (IMPORTANT)
[1.4.1-7.2]
- fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
- fix CVE-2012-1569 - missing length check when decoding DER lengths (#804920)
- fix CVE-2012-1573 - security issue in packet parsing (#805432)
Обновленные пакеты
Oracle Linux 5
Oracle Linux ia64
gnutls
1.4.1-7.el5_8.2
gnutls-devel
1.4.1-7.el5_8.2
gnutls-utils
1.4.1-7.el5_8.2
Oracle Linux x86_64
gnutls
1.4.1-7.el5_8.2
gnutls-devel
1.4.1-7.el5_8.2
gnutls-utils
1.4.1-7.el5_8.2
Oracle Linux i386
gnutls
1.4.1-7.el5_8.2
gnutls-devel
1.4.1-7.el5_8.2
gnutls-utils
1.4.1-7.el5_8.2
Связанные CVE
Связанные уязвимости
Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS servers to cause a denial of service (application crash) via a large SessionTicket.
Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS servers to cause a denial of service (application crash) via a large SessionTicket.
Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS servers to cause a denial of service (application crash) via a large SessionTicket.