Multiple vulnerabilities have been discovered in GnuTLS, the worst of which could lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/gnutls | * | < 3.8.10 | >= 3.8.10 |
GnuTLS is a secure communications library implementing the SSL, TLS, and DTLS protocols
Multiple vulnerabilities have been discovered in GnuTLS. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All GnuTLS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/gnutls-3.8.10"
Multiple vulnerabilities have been discovered in GnuTLS, the worst of which could lead to a denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/gnutls | * | < 3.8.5 | >= 3.8.5 |
GnuTLS is a secure communications library implementing the SSL, TLS, and DTLS protocols
Multiple vulnerabilities have been discovered in GnuTLS. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All GnuTLS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/gnutls-3.8.5"
A flaw was found in GnuTLS, possibly allowing a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/gnutls | * | < 3.6.15 | >= 3.6.15 |
GnuTLS is an Open Source implementation of the TLS and SSL protocols.
It was found that GnuTLS didn’t handle “no_renegotiation” alert properly.
A remote attacker could entice a user to connect to a malicious TLS endpoint using an application linked against GnuTLS, possibly resulting in a Denial of Service condition.
There is no known workaround at this time.
All GnuTLS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/gnutls-3.6.15"
An information disclosure vulnerability in GnuTLS allow remote attackers to obtain sensitive information.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/gnutls | * | < 3.6.14 | >= 3.6.14 |
GnuTLS is an Open Source implementation of the TLS and SSL protocols.
A flaw was reported in the TLS session ticket key construction in GnuTLS.
A remote attacker could recover previous conversations in TLS 1.2 and obtain sensitive information or conduct a man-in-the-middle attack to bypass authentication in TLS 1.3.
There is no known workaround at this time.
All GnuTLS user should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/gnutls-3.6.14"
A regression in GnuTLS breaks the security guarantees of the DTLS protocol.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/gnutls | * | < 3.6.13 | >= 3.6.13 |
GnuTLS is an Open Source implementation of the TLS and SSL protocols.
It was discovered that DTLS client did not contribute any randomness to the DTLS negotiation.
Please review the referenced advisory for details.
There is no known workaround at this time.
All GnuTLS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/gnutls-3.6.13"
Multiple vulnerabilities have been found in GnuTLS, the worst of which could result in a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/gnutls | * | < 3.6.7 | >= 3.6.7 |
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them.
Multiple vulnerabilities have been discovered in GnuTLS. Please review the CVE identifiers referenced below for details.
Please review the CVE identifiers referenced below for details.
There is no known workaround at this time.
All GnuTLS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/gnutls-3.6.7"
A null pointer dereference in GnuTLS might allow attackers to cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/gnutls | * | < 3.5.13 | >= 3.5.13 |
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them.
A null pointer dereference while decoding a status response TLS extension with valid contents was discovered in GnuTLS.
A remote attacker could possibly cause a Denial of Service condition.
There is no known workaround at this time.
All GnuTLS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/gnutls-3.5.13"
Packages which depend on this library may need to be recompiled. Tools such as revdep-rebuild may assist in identifying some of these packages.
Multiple vulnerabilities have been found in GnuTLS, the worst of which may allow execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/gnutls | * | < 3.3.26 | >= 3.3.26 |
GnuTLS is an Open Source implementation of the TLS and SSL protocols.
Multiple heap and stack overflows and double free vulnerabilities have been discovered in GnuTLS by the OSS-Fuzz project. Please review the CVE identifiers referenced below for details.
A remote attacker could entice a user or automated system to process a specially crafted certificate using an application linked against GnuTLS. This could possibly result in the execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All GnuTLS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/gnutls-3.3.26"
Multiple vulnerabilities have been fixed in GnuTLS, the worst of which can cause Denial of Service
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/gnutls | * | < 3.3.15 | >= 3.3.15 |
GnuTLS is an Open Source implementation of the TLS and SSL protocols.
Multiple vulnerabilities have been discovered in GnuTLS. Please review the CVE identifiers and external references below for details.
A context-dependent attacker can cause a denial of service condition.
There is no known workaround at this time.
All GnuTLS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/gnutls-3.3.15"
Multiple vulnerabilities have been discovered in GnuTLS, the worst of which could lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/gnutls | * | < 2.12.23-r6 | >= 2.12.23-r6 |
GnuTLS is an Open Source implementation of the TLS 1.2 and SSL 3.0 protocols.
Multiple vulnerabilities have been discovered in GnuTLS. Please review the CVE identifiers referenced below for details.
A remote attacker could utilize multiple vectors to spoof arbitrary SSL servers via a crafted certificate, execute arbitrary code or cause a Denial of Service condition.
There is no known workaround at this time.
All GnuTLS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/gnutls-2.12.23-r6"
Multiple vulnerabilities have been discovered in GnuTLS, the worst of which could lead to Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/gnutls | * | < 2.12.23-r1 | >= 2.12.23-r1 |
GnuTLS is an Open Source implementation of the TLS 1.2 and SSL 3.0 protocols.
Multiple vulnerabilities have been discovered in GnuTLS. Please review the CVE identifiers and Lucky Thirteen research paper referenced below for details.
A remote attacker could sent a specially crafted packet to cause a Denial of Service condition. Additionally, a remote attacker could perform man-in-the-middle attacks to recover plaintext data.
There is no known workaround at this time.
All GnuTLS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/gnutls-2.12.23-r1"
Multiple vulnerabilities have been found in GnuTLS, allowing a remote attacker to perform man-in-the-middle or Denial of Service attacks.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/gnutls | * | < 2.12.18 | >= 2.12.18 |
GnuTLS is an Open Source implementation of the TLS 1.2 and SSL 3.0 protocols.
Multiple vulnerabilities have been found in GnuTLS:
A remote attacker could perform man-in-the-middle attacks to spoof arbitrary SSL servers or cause a Denial of Service condition in applications linked against GnuTLS.
There is no known workaround at this time.
All GnuTLS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/gnutls-2.12.18"
Multiple vulnerabilities were found in GnuTLS, allowing for easier man-in-the-middle attacks.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/gnutls | * | < 2.10.0 | >= 2.10.0 |
GnuTLS is an Open Source implementation of the TLS 1.2 and SSL 3.0 protocols.
Multiple vulnerabilities have been discovered in GnuTLS. Please review the CVE identifiers referenced below for details.
An attacker could perform man-in-the-middle attacks to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority or to inject an arbitrary amount of chosen plaintext into the beginning of the application protocol stream, allowing for further exploitation.
There is no known workaround at this time.
All GnuTLS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/gnutls-2.10.0"
NOTE: This is a legacy GLSA. Updates for all affected architectures are available since August 6, 2010. It is likely that your system is already no longer affected by this issue.
Multiple vulnerabilities in GnuTLS might result in a Denial of Service, spoofing or the generation of invalid keys.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/gnutls | * | < 2.6.6 | >= 2.6.6 |
GnuTLS is an Open Source implementation of the TLS 1.0 and SSL 3.0 protocols.
The following vulnerabilities were found in GnuTLS:
A remote attacker could entice a user or automated system to process a specially crafted DSA certificate, possibly resulting in a Denial of Service condition. NOTE: This issue might have other unspecified impact including the execution of arbitrary code. Furthermore, a remote attacker could spoof signatures on certificates and the "gnutls-cli" application can be tricked into accepting an invalid certificate.
There is no known workaround at this time.
All GnuTLS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/gnutls-2.6.6"
A certificate validation error in GnuTLS might allow for spoofing attacks.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/gnutls | * | < 2.4.1-r2 | >= 2.4.1-r2 |
GnuTLS is an open-source implementation of TLS 1.0 and SSL 3.0.
Martin von Gagern reported that the _gnutls_x509_verify_certificate() function in lib/x509/verify.c trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate.
A remote attacker could exploit this vulnerability and spoof arbitrary names to conduct Man-In-The-Middle attacks and intercept sensitive information.
There is no known workaround at this time.
All GnuTLS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/gnutls-2.4.1-r2"
Multiple vulnerabilities might allow for the execution of arbitrary code in daemons using GnuTLS.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/gnutls | * | < 2.2.5 | >= 2.2.5 |
GnuTLS is an implementation of Secure Sockets Layer (SSL) 3.0 and Transport Layer Security (TLS) 1.0, 1.1 and 1.2.
Ossi Herrala and Jukka Taimisto of Codenomicon reported three vulnerabilities in libgnutls of GnuTLS:
Unauthenticated remote attackers could exploit these vulnerabilities to cause Denial of Service conditions in daemons using GnuTLS. The first vulnerability (CVE-2008-1948) might allow for the execution of arbitrary code with the privileges of the daemon handling incoming TLS connections.
There is no known workaround at this time.
All GnuTLS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/gnutls-2.2.5"
GnuTLS fails to handle excess data which could allow an attacker to forge a PKCS #1 v1.5 signature.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/gnutls | * | < 1.4.4 | >= 1.4.4 |
GnuTLS is an implementation of SSL 3.0 and TLS 1.0.
verify.c fails to properly handle excess data in digestAlgorithm.parameters field while generating a hash when using an RSA key with exponent 3. RSA keys that use exponent 3 are commonplace.
Remote attackers could forge PKCS #1 v1.5 signatures that are signed with an RSA key, preventing GnuTLS from correctly verifying X.509 and other certificates that use PKCS.
There is no known workaround at this time.
All GnuTLS users should update both packages:
# emerge --sync # emerge --update --ask --verbose ">=net-libs/gnutls-1.4.4"
A flaw in the parsing of Distinguished Encoding Rules (DER) has been discovered in libtasn1, potentially resulting in the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/libtasn1 | * | < 0.2.18 | >= 0.2.18 |
| net-libs/gnutls | * | < 1.2.10 | >= 1.2.10 |
Libtasn1 is a library used to parse ASN.1 (Abstract Syntax Notation One) objects, and perform DER (Distinguished Encoding Rules) decoding. Libtasn1 is included with the GNU TLS library, which is used by applications to provide a cryptographically secure communications channel.
Evgeny Legerov has reported a flaw in the DER decoding routines provided by libtasn1, which could cause an out of bounds access to occur.
A remote attacker could cause an application using libtasn1 to crash and potentially execute arbitrary code by sending specially crafted input.
There is no known workaround at this time.
All libtasn1 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/libtasn1-0.2.18"
All GNU TLS users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/gnutls-1.2.10"
The GnuTLS library is vulnerable to Denial of Service attacks.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/gnutls | * | < 1.2.3 | >= 1.2.3, >= 1.0.25 (revision) |
GnuTLS is a free TLS 1.0 and SSL 3.0 implementation for the GNU project.
A vulnerability has been discovered in the record packet parsing in the GnuTLS library. Additionally, a flaw was also found in the RSA key export functionality.
A remote attacker could exploit this vulnerability and cause a Denial of Service to any application that utilizes the GnuTLS library.
There is no known workaround at this time.
All GnuTLS users should remove the existing installation and upgrade to the latest version:
# emerge --sync # emerge --unmerge gnutls # emerge --ask --oneshot --verbose net-libs/gnutls
Due to small API changes with the previous version, please do the following to ensure your applications are using the latest GnuTLS that you just emerged.
# revdep-rebuild --soname-regexp libgnutls.so.1[0-1]
Previously exported RSA keys can be fixed by executing the following command on the key files:
# certtool -k infile outfile