ELSA-2010-0166

ELSA-2010-0166 - gnutls security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2010-03-25

Description

[1.4.1-3.8]
- fix safe renegotiation on SSL3 protocol

[1.4.1-3.7]
- implement safe renegotiation - CVE-2009-3555 (#533125)
- do not allow MD2 in certificate signatures by default - CVE-2009-2409
(#510197)

Related CVEs

CVE-2009-2409

CVE-2009-3555

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	gnutls-1.4.1-3.el5_4.8.src.rpm	57511004da8503957dbd4e33497d5db9	ELSA-2014-0594
	gnutls-1.4.1-3.el5_4.8.i386.rpm	a949fa8633413a47fe2a08fe988a51ce	ELSA-2014-0594
	gnutls-devel-1.4.1-3.el5_4.8.i386.rpm	59e87f8c216b72d0b54a5b959ef495ed	ELSA-2014-0594
	gnutls-utils-1.4.1-3.el5_4.8.i386.rpm	22e3e408df3079dfac452c2b0b59e55d	ELSA-2014-0594
Oracle Linux 5 (ia64)	gnutls-1.4.1-3.el5_4.8.src.rpm	57511004da8503957dbd4e33497d5db9	ELSA-2014-0594
	gnutls-1.4.1-3.el5_4.8.i386.rpm	a949fa8633413a47fe2a08fe988a51ce	ELSA-2014-0594
	gnutls-1.4.1-3.el5_4.8.ia64.rpm	b73257b8d59dc5c8775a221a8a5be45b	ELSA-2014-0594
	gnutls-devel-1.4.1-3.el5_4.8.ia64.rpm	1763f8f825dc112185089fd8fb517d04	ELSA-2014-0594
	gnutls-utils-1.4.1-3.el5_4.8.ia64.rpm	f41193f1fa047b94cefb7c05b9159998	ELSA-2014-0594
Oracle Linux 5 (x86_64)	gnutls-1.4.1-3.el5_4.8.src.rpm	57511004da8503957dbd4e33497d5db9	ELSA-2014-0594
	gnutls-1.4.1-3.el5_4.8.i386.rpm	a949fa8633413a47fe2a08fe988a51ce	ELSA-2014-0594
	gnutls-1.4.1-3.el5_4.8.x86_64.rpm	14670b568622ebf92ad3e57919997a45	ELSA-2014-0594
	gnutls-devel-1.4.1-3.el5_4.8.i386.rpm	59e87f8c216b72d0b54a5b959ef495ed	ELSA-2014-0594
	gnutls-devel-1.4.1-3.el5_4.8.x86_64.rpm	afcb1af3b78d84c510e10ce561d9bef8	ELSA-2014-0594
	gnutls-utils-1.4.1-3.el5_4.8.x86_64.rpm	f3b95085a8d4d9c88e1aef34e19080bd	ELSA-2014-0594

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team