Solution
Please Install the Updated Packages.
Insight
The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security (TLS).
Martin von Gagern discovered a flaw in the way GnuTLS verified certificate chains provided by a server. A malicious server could use this flaw to spoof its identity by tricking client applications using the GnuTLS library to trust invalid certificates. (CVE-2008-4989)
Users of GnuTLS are advised to upgrade to these updated packages, which contain a backported patch that corrects this issue.
Affected
gnutls on Red Hat Enterprise Linux (v. 5 server)
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2008-4989 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related Vulnerabilities