Home / mailings [SECURITY] [DSA 1935-1] New gnutls23/gnutls26 packages fix SSL certificate
Posted on 17 November 2009
Debian Security Advisory-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- --------------------------------------------------------------------------
Debian Security Advisory DSA-1935-1 security@debian.org
http://www.debian.org/security/ Giuseppe Iuculano
November 17th, 2009 http://www.debian.org/security/faq
- --------------------------------------------------------------------------
Packages : gnutls13 gnutls26
Vulnerability : several vulnerabilities
Problem type : remote
Debian-specific: no
Debian bug : 541439
CVE Ids : CVE-2009-2409 CVE-2009-2730
Dan Kaminsky and Moxie Marlinspike discovered that gnutls, an implementation of
the TLS/SSL protocol, does not properly handle a '