ELSA-2010-0166

ELSA-2010-0166 - gnutls security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2010-03-25

Description

[1.4.1-3.8]
- fix safe renegotiation on SSL3 protocol

[1.4.1-3.7]
- implement safe renegotiation - CVE-2009-3555 (#533125)
- do not allow MD2 in certificate signatures by default - CVE-2009-2409
(#510197)

Related CVEs

CVE-2009-3555

CVE-2009-2409

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	el5_u4_i386_patch
	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	el5_u5_i386_patch
	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	ol5_i386_latest
	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	ol5_u6_i386_base
	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	ol5_u7_i386_base
	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	ol5_u8_i386_base
	gnutls-1.4.1-3.el5_4.8.i386.rpm	4d46fdb86c8fb4437a42571bea9d73f83b2d9a6f365e3b37246d35aff92b7e20	ELSA-2014-0594	el5_u4_i386_patch
	gnutls-1.4.1-3.el5_4.8.i386.rpm	4d46fdb86c8fb4437a42571bea9d73f83b2d9a6f365e3b37246d35aff92b7e20	ELSA-2014-0594	el5_u5_i386_patch
	gnutls-1.4.1-3.el5_4.8.i386.rpm	4d46fdb86c8fb4437a42571bea9d73f83b2d9a6f365e3b37246d35aff92b7e20	ELSA-2014-0594	ol5_i386_latest
	gnutls-1.4.1-3.el5_4.8.i386.rpm	4d46fdb86c8fb4437a42571bea9d73f83b2d9a6f365e3b37246d35aff92b7e20	ELSA-2014-0594	ol5_u6_i386_base
	gnutls-1.4.1-3.el5_4.8.i386.rpm	4d46fdb86c8fb4437a42571bea9d73f83b2d9a6f365e3b37246d35aff92b7e20	ELSA-2014-0594	ol5_u7_i386_base
	gnutls-1.4.1-3.el5_4.8.i386.rpm	4d46fdb86c8fb4437a42571bea9d73f83b2d9a6f365e3b37246d35aff92b7e20	ELSA-2014-0594	ol5_u8_i386_base
	gnutls-devel-1.4.1-3.el5_4.8.i386.rpm	bae34bb7aff7fa15bc92694536c42e1bebcd95041e945714b0bbd59f989a7587	ELSA-2014-0594	el5_u4_i386_patch
	gnutls-devel-1.4.1-3.el5_4.8.i386.rpm	bae34bb7aff7fa15bc92694536c42e1bebcd95041e945714b0bbd59f989a7587	ELSA-2014-0594	el5_u5_i386_patch
	gnutls-devel-1.4.1-3.el5_4.8.i386.rpm	bae34bb7aff7fa15bc92694536c42e1bebcd95041e945714b0bbd59f989a7587	ELSA-2014-0594	ol5_i386_latest
	gnutls-devel-1.4.1-3.el5_4.8.i386.rpm	bae34bb7aff7fa15bc92694536c42e1bebcd95041e945714b0bbd59f989a7587	ELSA-2014-0594	ol5_u6_i386_base
	gnutls-devel-1.4.1-3.el5_4.8.i386.rpm	bae34bb7aff7fa15bc92694536c42e1bebcd95041e945714b0bbd59f989a7587	ELSA-2014-0594	ol5_u7_i386_base
	gnutls-devel-1.4.1-3.el5_4.8.i386.rpm	bae34bb7aff7fa15bc92694536c42e1bebcd95041e945714b0bbd59f989a7587	ELSA-2014-0594	ol5_u8_i386_base
	gnutls-utils-1.4.1-3.el5_4.8.i386.rpm	e0f622d7af3b49cbcc02bf9a8ecdac482b09e4cbf5caafb4867bc63cb0b96443	ELSA-2014-0594	el5_u4_i386_patch
	gnutls-utils-1.4.1-3.el5_4.8.i386.rpm	e0f622d7af3b49cbcc02bf9a8ecdac482b09e4cbf5caafb4867bc63cb0b96443	ELSA-2014-0594	el5_u5_i386_patch
	gnutls-utils-1.4.1-3.el5_4.8.i386.rpm	e0f622d7af3b49cbcc02bf9a8ecdac482b09e4cbf5caafb4867bc63cb0b96443	ELSA-2014-0594	ol5_i386_latest
	gnutls-utils-1.4.1-3.el5_4.8.i386.rpm	e0f622d7af3b49cbcc02bf9a8ecdac482b09e4cbf5caafb4867bc63cb0b96443	ELSA-2014-0594	ol5_u6_i386_base
	gnutls-utils-1.4.1-3.el5_4.8.i386.rpm	e0f622d7af3b49cbcc02bf9a8ecdac482b09e4cbf5caafb4867bc63cb0b96443	ELSA-2014-0594	ol5_u7_i386_base
	gnutls-utils-1.4.1-3.el5_4.8.i386.rpm	e0f622d7af3b49cbcc02bf9a8ecdac482b09e4cbf5caafb4867bc63cb0b96443	ELSA-2014-0594	ol5_u8_i386_base
Oracle Linux 5 (ia64)	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	el5_u4_ia64_patch
	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	el5_u5_ia64_patch
	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	ol5_ia64_latest
	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	ol5_u6_ia64_base
	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	ol5_u7_ia64_base
	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	ol5_u8_ia64_base
	gnutls-1.4.1-3.el5_4.8.i386.rpm	4d46fdb86c8fb4437a42571bea9d73f83b2d9a6f365e3b37246d35aff92b7e20	ELSA-2014-0594	el5_u4_ia64_patch
	gnutls-1.4.1-3.el5_4.8.i386.rpm	4d46fdb86c8fb4437a42571bea9d73f83b2d9a6f365e3b37246d35aff92b7e20	ELSA-2014-0594	el5_u5_ia64_patch
	gnutls-1.4.1-3.el5_4.8.i386.rpm	4d46fdb86c8fb4437a42571bea9d73f83b2d9a6f365e3b37246d35aff92b7e20	ELSA-2014-0594	ol5_ia64_latest
	gnutls-1.4.1-3.el5_4.8.i386.rpm	4d46fdb86c8fb4437a42571bea9d73f83b2d9a6f365e3b37246d35aff92b7e20	ELSA-2014-0594	ol5_u6_ia64_base
	gnutls-1.4.1-3.el5_4.8.i386.rpm	4d46fdb86c8fb4437a42571bea9d73f83b2d9a6f365e3b37246d35aff92b7e20	ELSA-2014-0594	ol5_u7_ia64_base
	gnutls-1.4.1-3.el5_4.8.i386.rpm	4d46fdb86c8fb4437a42571bea9d73f83b2d9a6f365e3b37246d35aff92b7e20	ELSA-2014-0594	ol5_u8_ia64_base
	gnutls-1.4.1-3.el5_4.8.ia64.rpm	c6a4d1310c20a57dd009add032c934b6de1bef98a0456179b07b36e1f09cebd1	ELSA-2014-0594	el5_u4_ia64_patch
	gnutls-1.4.1-3.el5_4.8.ia64.rpm	c6a4d1310c20a57dd009add032c934b6de1bef98a0456179b07b36e1f09cebd1	ELSA-2014-0594	el5_u5_ia64_patch
	gnutls-1.4.1-3.el5_4.8.ia64.rpm	c6a4d1310c20a57dd009add032c934b6de1bef98a0456179b07b36e1f09cebd1	ELSA-2014-0594	ol5_ia64_latest
	gnutls-1.4.1-3.el5_4.8.ia64.rpm	c6a4d1310c20a57dd009add032c934b6de1bef98a0456179b07b36e1f09cebd1	ELSA-2014-0594	ol5_u6_ia64_base
	gnutls-1.4.1-3.el5_4.8.ia64.rpm	c6a4d1310c20a57dd009add032c934b6de1bef98a0456179b07b36e1f09cebd1	ELSA-2014-0594	ol5_u7_ia64_base
	gnutls-1.4.1-3.el5_4.8.ia64.rpm	c6a4d1310c20a57dd009add032c934b6de1bef98a0456179b07b36e1f09cebd1	ELSA-2014-0594	ol5_u8_ia64_base
	gnutls-devel-1.4.1-3.el5_4.8.ia64.rpm	d9aea42fc9947e68ce8117d73b65cdc9e205f65488119c08d27a3153fa40621c	ELSA-2014-0594	el5_u4_ia64_patch
	gnutls-devel-1.4.1-3.el5_4.8.ia64.rpm	d9aea42fc9947e68ce8117d73b65cdc9e205f65488119c08d27a3153fa40621c	ELSA-2014-0594	el5_u5_ia64_patch
	gnutls-devel-1.4.1-3.el5_4.8.ia64.rpm	d9aea42fc9947e68ce8117d73b65cdc9e205f65488119c08d27a3153fa40621c	ELSA-2014-0594	ol5_ia64_latest
	gnutls-devel-1.4.1-3.el5_4.8.ia64.rpm	d9aea42fc9947e68ce8117d73b65cdc9e205f65488119c08d27a3153fa40621c	ELSA-2014-0594	ol5_u6_ia64_base
	gnutls-devel-1.4.1-3.el5_4.8.ia64.rpm	d9aea42fc9947e68ce8117d73b65cdc9e205f65488119c08d27a3153fa40621c	ELSA-2014-0594	ol5_u7_ia64_base
	gnutls-devel-1.4.1-3.el5_4.8.ia64.rpm	d9aea42fc9947e68ce8117d73b65cdc9e205f65488119c08d27a3153fa40621c	ELSA-2014-0594	ol5_u8_ia64_base
	gnutls-utils-1.4.1-3.el5_4.8.ia64.rpm	3b7eb337b55ab15cd2c2629d0c8b92c5c8d55ed08368c3ffac7d0f60d62e60a0	ELSA-2014-0594	el5_u4_ia64_patch
	gnutls-utils-1.4.1-3.el5_4.8.ia64.rpm	3b7eb337b55ab15cd2c2629d0c8b92c5c8d55ed08368c3ffac7d0f60d62e60a0	ELSA-2014-0594	el5_u5_ia64_patch
	gnutls-utils-1.4.1-3.el5_4.8.ia64.rpm	3b7eb337b55ab15cd2c2629d0c8b92c5c8d55ed08368c3ffac7d0f60d62e60a0	ELSA-2014-0594	ol5_ia64_latest
	gnutls-utils-1.4.1-3.el5_4.8.ia64.rpm	3b7eb337b55ab15cd2c2629d0c8b92c5c8d55ed08368c3ffac7d0f60d62e60a0	ELSA-2014-0594	ol5_u6_ia64_base
	gnutls-utils-1.4.1-3.el5_4.8.ia64.rpm	3b7eb337b55ab15cd2c2629d0c8b92c5c8d55ed08368c3ffac7d0f60d62e60a0	ELSA-2014-0594	ol5_u7_ia64_base
	gnutls-utils-1.4.1-3.el5_4.8.ia64.rpm	3b7eb337b55ab15cd2c2629d0c8b92c5c8d55ed08368c3ffac7d0f60d62e60a0	ELSA-2014-0594	ol5_u8_ia64_base
Oracle Linux 5 (x86_64)	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	el5_u4_x86_64_patch
	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	el5_u5_x86_64_patch
	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	exadata_dbserver_11.2.3.1.0_x86_64_base
	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	exadata_dbserver_11.2_x86_64_latest
	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	ol5_u6_x86_64_base
	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	ol5_u7_x86_64_base
	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	ol5_u8_x86_64_base
	gnutls-1.4.1-3.el5_4.8.src.rpm	b8d8ec666fe15f96df9b33715a3db8f26271a2113f0e085b452d14c6cadb1c7d	ELSA-2014-0594	ol5_x86_64_latest
	gnutls-1.4.1-3.el5_4.8.i386.rpm	4d46fdb86c8fb4437a42571bea9d73f83b2d9a6f365e3b37246d35aff92b7e20	ELSA-2014-0594	el5_u4_x86_64_patch
	gnutls-1.4.1-3.el5_4.8.i386.rpm	4d46fdb86c8fb4437a42571bea9d73f83b2d9a6f365e3b37246d35aff92b7e20	ELSA-2014-0594	el5_u5_x86_64_patch
	gnutls-1.4.1-3.el5_4.8.i386.rpm	4d46fdb86c8fb4437a42571bea9d73f83b2d9a6f365e3b37246d35aff92b7e20	ELSA-2014-0594	ol5_u6_x86_64_base
	gnutls-1.4.1-3.el5_4.8.i386.rpm	4d46fdb86c8fb4437a42571bea9d73f83b2d9a6f365e3b37246d35aff92b7e20	ELSA-2014-0594	ol5_u7_x86_64_base
	gnutls-1.4.1-3.el5_4.8.i386.rpm	4d46fdb86c8fb4437a42571bea9d73f83b2d9a6f365e3b37246d35aff92b7e20	ELSA-2014-0594	ol5_u8_x86_64_base
	gnutls-1.4.1-3.el5_4.8.i386.rpm	4d46fdb86c8fb4437a42571bea9d73f83b2d9a6f365e3b37246d35aff92b7e20	ELSA-2014-0594	ol5_x86_64_latest
	gnutls-1.4.1-3.el5_4.8.x86_64.rpm	98af09a0ab8f88f21170ce2758b20634fdb5118b59e2f679ea7cb56fef770cd4	ELSA-2014-0594	el5_u4_x86_64_patch
	gnutls-1.4.1-3.el5_4.8.x86_64.rpm	98af09a0ab8f88f21170ce2758b20634fdb5118b59e2f679ea7cb56fef770cd4	ELSA-2014-0594	el5_u5_x86_64_patch
	gnutls-1.4.1-3.el5_4.8.x86_64.rpm	98af09a0ab8f88f21170ce2758b20634fdb5118b59e2f679ea7cb56fef770cd4	ELSA-2014-0594	exadata_dbserver_11.2.3.1.0_x86_64_base
	gnutls-1.4.1-3.el5_4.8.x86_64.rpm	98af09a0ab8f88f21170ce2758b20634fdb5118b59e2f679ea7cb56fef770cd4	ELSA-2014-0594	exadata_dbserver_11.2_x86_64_latest
	gnutls-1.4.1-3.el5_4.8.x86_64.rpm	98af09a0ab8f88f21170ce2758b20634fdb5118b59e2f679ea7cb56fef770cd4	ELSA-2014-0594	ol5_u6_x86_64_base
	gnutls-1.4.1-3.el5_4.8.x86_64.rpm	98af09a0ab8f88f21170ce2758b20634fdb5118b59e2f679ea7cb56fef770cd4	ELSA-2014-0594	ol5_u7_x86_64_base
	gnutls-1.4.1-3.el5_4.8.x86_64.rpm	98af09a0ab8f88f21170ce2758b20634fdb5118b59e2f679ea7cb56fef770cd4	ELSA-2014-0594	ol5_u8_x86_64_base
	gnutls-1.4.1-3.el5_4.8.x86_64.rpm	98af09a0ab8f88f21170ce2758b20634fdb5118b59e2f679ea7cb56fef770cd4	ELSA-2014-0594	ol5_x86_64_latest
	gnutls-devel-1.4.1-3.el5_4.8.i386.rpm	bae34bb7aff7fa15bc92694536c42e1bebcd95041e945714b0bbd59f989a7587	ELSA-2014-0594	el5_u4_x86_64_patch
	gnutls-devel-1.4.1-3.el5_4.8.i386.rpm	bae34bb7aff7fa15bc92694536c42e1bebcd95041e945714b0bbd59f989a7587	ELSA-2014-0594	el5_u5_x86_64_patch
	gnutls-devel-1.4.1-3.el5_4.8.i386.rpm	bae34bb7aff7fa15bc92694536c42e1bebcd95041e945714b0bbd59f989a7587	ELSA-2014-0594	ol5_u6_x86_64_base
	gnutls-devel-1.4.1-3.el5_4.8.i386.rpm	bae34bb7aff7fa15bc92694536c42e1bebcd95041e945714b0bbd59f989a7587	ELSA-2014-0594	ol5_u7_x86_64_base
	gnutls-devel-1.4.1-3.el5_4.8.i386.rpm	bae34bb7aff7fa15bc92694536c42e1bebcd95041e945714b0bbd59f989a7587	ELSA-2014-0594	ol5_u8_x86_64_base
	gnutls-devel-1.4.1-3.el5_4.8.i386.rpm	bae34bb7aff7fa15bc92694536c42e1bebcd95041e945714b0bbd59f989a7587	ELSA-2014-0594	ol5_x86_64_latest
	gnutls-devel-1.4.1-3.el5_4.8.x86_64.rpm	e716d3fbcb594b5bb258461320a9a8184ec0d79f43c06a11617ef184f537059a	ELSA-2014-0594	el5_u4_x86_64_patch
	gnutls-devel-1.4.1-3.el5_4.8.x86_64.rpm	e716d3fbcb594b5bb258461320a9a8184ec0d79f43c06a11617ef184f537059a	ELSA-2014-0594	el5_u5_x86_64_patch
	gnutls-devel-1.4.1-3.el5_4.8.x86_64.rpm	e716d3fbcb594b5bb258461320a9a8184ec0d79f43c06a11617ef184f537059a	ELSA-2014-0594	ol5_u6_x86_64_base
	gnutls-devel-1.4.1-3.el5_4.8.x86_64.rpm	e716d3fbcb594b5bb258461320a9a8184ec0d79f43c06a11617ef184f537059a	ELSA-2014-0594	ol5_u7_x86_64_base
	gnutls-devel-1.4.1-3.el5_4.8.x86_64.rpm	e716d3fbcb594b5bb258461320a9a8184ec0d79f43c06a11617ef184f537059a	ELSA-2014-0594	ol5_u8_x86_64_base
	gnutls-devel-1.4.1-3.el5_4.8.x86_64.rpm	e716d3fbcb594b5bb258461320a9a8184ec0d79f43c06a11617ef184f537059a	ELSA-2014-0594	ol5_x86_64_latest
	gnutls-utils-1.4.1-3.el5_4.8.x86_64.rpm	653f122da96e74284105432e67e8d0ee234aea87fe6fa1b388c9bd9cf1218a9c	ELSA-2014-0594	el5_u4_x86_64_patch
	gnutls-utils-1.4.1-3.el5_4.8.x86_64.rpm	653f122da96e74284105432e67e8d0ee234aea87fe6fa1b388c9bd9cf1218a9c	ELSA-2014-0594	el5_u5_x86_64_patch
	gnutls-utils-1.4.1-3.el5_4.8.x86_64.rpm	653f122da96e74284105432e67e8d0ee234aea87fe6fa1b388c9bd9cf1218a9c	ELSA-2014-0594	ol5_u6_x86_64_base
	gnutls-utils-1.4.1-3.el5_4.8.x86_64.rpm	653f122da96e74284105432e67e8d0ee234aea87fe6fa1b388c9bd9cf1218a9c	ELSA-2014-0594	ol5_u7_x86_64_base
	gnutls-utils-1.4.1-3.el5_4.8.x86_64.rpm	653f122da96e74284105432e67e8d0ee234aea87fe6fa1b388c9bd9cf1218a9c	ELSA-2014-0594	ol5_u8_x86_64_base
	gnutls-utils-1.4.1-3.el5_4.8.x86_64.rpm	653f122da96e74284105432e67e8d0ee234aea87fe6fa1b388c9bd9cf1218a9c	ELSA-2014-0594	ol5_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team