Synopsis

gnutls security update

Type/Severity

Security Advisory: Moderate

Topic

Updated GnuTLS packages that fix a remote denial of service
vulnerability are available for Red Hat Enterprise Linux 4.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

The GnuTLS library implements Secure Sockets Layer (SSL v3) and Transport
Layer Security (TLS v1) protocols.

A denial of service bug was found in the GnuTLS library versions prior to
1.0.25. A remote attacker could perform a carefully crafted TLS handshake
against a service that uses the GnuTLS library causing the service to
crash. The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2005-1431 to this issue.

All users of GnuTLS are advised to upgrade to these updated packages and to
restart any services which use GnuTLS.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those
RPMs which are currently installed will be updated. Those RPMs which are
not installed but included in the list will not be updated. Note that you
can also use wildcards (*.rpm) if your current directory *only* contains
the desired RPMs.

Please note that this update is also available via Red Hat Network. Many
people find this an easier way to apply updates. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

If up2date fails to connect to Red Hat Network due to SSL
Certificate Errors, you need to install a version of the
up2date client with an updated certificate. The latest version of
up2date is available from the Red Hat FTP site and may also be
downloaded directly from the RHN website:

https://rhn.redhat.com/help/latest-up2date.pxt

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 156856 - CAN-2005-1431 gnutls record packet parsing DoS

CVEs

• CVE-2005-1431

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
gnutls-1.0.20-3.2.1.src.rpm	SHA-256: 7bb8fe00d89f37491a732fff51321114561de787417cbe0fa155efb73d699954
x86_64
gnutls-1.0.20-3.2.1.i386.rpm	SHA-256: 19474b4a8d86053d0c39f82491e4923bd0aa400a91732181a256b785a7da8ef7
gnutls-1.0.20-3.2.1.i386.rpm	SHA-256: 19474b4a8d86053d0c39f82491e4923bd0aa400a91732181a256b785a7da8ef7
gnutls-1.0.20-3.2.1.x86_64.rpm	SHA-256: 1dc0d54fc7713d39999b813c7f50773f2438903e690ba38f40f6a7a878ac9e8e
gnutls-1.0.20-3.2.1.x86_64.rpm	SHA-256: 1dc0d54fc7713d39999b813c7f50773f2438903e690ba38f40f6a7a878ac9e8e
gnutls-devel-1.0.20-3.2.1.x86_64.rpm	SHA-256: 06deca03a15ecf9254e7efcb13c1018505fcc22f42d22edb428b66189a9f82da
gnutls-devel-1.0.20-3.2.1.x86_64.rpm	SHA-256: 06deca03a15ecf9254e7efcb13c1018505fcc22f42d22edb428b66189a9f82da
ia64
gnutls-1.0.20-3.2.1.i386.rpm	SHA-256: 19474b4a8d86053d0c39f82491e4923bd0aa400a91732181a256b785a7da8ef7
gnutls-1.0.20-3.2.1.i386.rpm	SHA-256: 19474b4a8d86053d0c39f82491e4923bd0aa400a91732181a256b785a7da8ef7
gnutls-1.0.20-3.2.1.ia64.rpm	SHA-256: a00cb8397ca5e867b2bad000db807f3c59b96039076408b0cd4e4bcecedbe6ae
gnutls-1.0.20-3.2.1.ia64.rpm	SHA-256: a00cb8397ca5e867b2bad000db807f3c59b96039076408b0cd4e4bcecedbe6ae
gnutls-devel-1.0.20-3.2.1.ia64.rpm	SHA-256: f6520dc747c64123ba302521183ef4df234200c3a087bc79cb2947b0ab0d45e9
gnutls-devel-1.0.20-3.2.1.ia64.rpm	SHA-256: f6520dc747c64123ba302521183ef4df234200c3a087bc79cb2947b0ab0d45e9
i386
gnutls-1.0.20-3.2.1.i386.rpm	SHA-256: 19474b4a8d86053d0c39f82491e4923bd0aa400a91732181a256b785a7da8ef7
gnutls-1.0.20-3.2.1.i386.rpm	SHA-256: 19474b4a8d86053d0c39f82491e4923bd0aa400a91732181a256b785a7da8ef7
gnutls-devel-1.0.20-3.2.1.i386.rpm	SHA-256: 26d7d37921a58e2bd1055d65e9c11fd6beb84349089d3b09e90d2d3c1e18dba1
gnutls-devel-1.0.20-3.2.1.i386.rpm	SHA-256: 26d7d37921a58e2bd1055d65e9c11fd6beb84349089d3b09e90d2d3c1e18dba1

Red Hat Enterprise Linux Workstation 4

SRPM
gnutls-1.0.20-3.2.1.src.rpm	SHA-256: 7bb8fe00d89f37491a732fff51321114561de787417cbe0fa155efb73d699954
x86_64
gnutls-1.0.20-3.2.1.i386.rpm	SHA-256: 19474b4a8d86053d0c39f82491e4923bd0aa400a91732181a256b785a7da8ef7
gnutls-1.0.20-3.2.1.x86_64.rpm	SHA-256: 1dc0d54fc7713d39999b813c7f50773f2438903e690ba38f40f6a7a878ac9e8e
gnutls-devel-1.0.20-3.2.1.x86_64.rpm	SHA-256: 06deca03a15ecf9254e7efcb13c1018505fcc22f42d22edb428b66189a9f82da
ia64
gnutls-1.0.20-3.2.1.i386.rpm	SHA-256: 19474b4a8d86053d0c39f82491e4923bd0aa400a91732181a256b785a7da8ef7
gnutls-1.0.20-3.2.1.ia64.rpm	SHA-256: a00cb8397ca5e867b2bad000db807f3c59b96039076408b0cd4e4bcecedbe6ae
gnutls-devel-1.0.20-3.2.1.ia64.rpm	SHA-256: f6520dc747c64123ba302521183ef4df234200c3a087bc79cb2947b0ab0d45e9
i386
gnutls-1.0.20-3.2.1.i386.rpm	SHA-256: 19474b4a8d86053d0c39f82491e4923bd0aa400a91732181a256b785a7da8ef7
gnutls-devel-1.0.20-3.2.1.i386.rpm	SHA-256: 26d7d37921a58e2bd1055d65e9c11fd6beb84349089d3b09e90d2d3c1e18dba1

Red Hat Enterprise Linux Desktop 4

SRPM
gnutls-1.0.20-3.2.1.src.rpm	SHA-256: 7bb8fe00d89f37491a732fff51321114561de787417cbe0fa155efb73d699954
x86_64
gnutls-1.0.20-3.2.1.i386.rpm	SHA-256: 19474b4a8d86053d0c39f82491e4923bd0aa400a91732181a256b785a7da8ef7
gnutls-1.0.20-3.2.1.x86_64.rpm	SHA-256: 1dc0d54fc7713d39999b813c7f50773f2438903e690ba38f40f6a7a878ac9e8e
gnutls-devel-1.0.20-3.2.1.x86_64.rpm	SHA-256: 06deca03a15ecf9254e7efcb13c1018505fcc22f42d22edb428b66189a9f82da
i386
gnutls-1.0.20-3.2.1.i386.rpm	SHA-256: 19474b4a8d86053d0c39f82491e4923bd0aa400a91732181a256b785a7da8ef7
gnutls-devel-1.0.20-3.2.1.i386.rpm	SHA-256: 26d7d37921a58e2bd1055d65e9c11fd6beb84349089d3b09e90d2d3c1e18dba1

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
gnutls-1.0.20-3.2.1.src.rpm	SHA-256: 7bb8fe00d89f37491a732fff51321114561de787417cbe0fa155efb73d699954
s390x
gnutls-1.0.20-3.2.1.s390.rpm	SHA-256: 53b66e21ff4a382b82edd4b2afa6fef986b762dba929d6fd08925c81880b5913
gnutls-1.0.20-3.2.1.s390x.rpm	SHA-256: 24fa72895c7a1dd198508782b7bb3fbd5a4ada597bbd17273be2afb555ba7111
gnutls-devel-1.0.20-3.2.1.s390x.rpm	SHA-256: 2f5cfac0e3031c7938bf8410b1fc7b8d42110112a71c7d8170ed8401a89984f0
s390
gnutls-1.0.20-3.2.1.s390.rpm	SHA-256: 53b66e21ff4a382b82edd4b2afa6fef986b762dba929d6fd08925c81880b5913
gnutls-devel-1.0.20-3.2.1.s390.rpm	SHA-256: bb93a80a1a28e5e4c6403636377aade2ae355f0733490b9ebbdc049e29ca1e08

Red Hat Enterprise Linux for Power, big endian 4

SRPM
gnutls-1.0.20-3.2.1.src.rpm	SHA-256: 7bb8fe00d89f37491a732fff51321114561de787417cbe0fa155efb73d699954
ppc
gnutls-1.0.20-3.2.1.ppc.rpm	SHA-256: 01b556feb90800d089b16a5aa3baad8c729b2c8b6c537c59c100b7d6159ee833
gnutls-1.0.20-3.2.1.ppc64.rpm	SHA-256: 7254fcd61a5c470576df6321a177dbc6ced40b4f0ccfeeab4da912d2e121d557
gnutls-devel-1.0.20-3.2.1.ppc.rpm	SHA-256: 1c2c1def9a6a672257c1b855b256f72c72d4c6c9b4ab548f2493573ba3f1ca4f