Novell Home

CVE-2009-5138

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2009-5138 at MITRE

Description

GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates, a different vulnerability than CVE-2014-1959.

NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

Novell/SUSE information

Novell Bugzilla entry: 865993

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Server 11 SP1
  • gnutls-debuginfo >= 2.4.1-24.39.49.1
Builds
SAT Patch Nr: 8948
SUSE Linux Enterprise Server 11 SP1 LTSS
  • gnutls >= 2.4.1-24.39.49.1
  • libgnutls-extra26 >= 2.4.1-24.39.49.1
  • libgnutls26 >= 2.4.1-24.39.49.1
Builds
SAT Patch Nr: 8951
SUSE Linux Enterprise Server 11 SP1 LTSS
  • gnutls >= 2.4.1-24.39.49.1
  • libgnutls-extra26 >= 2.4.1-24.39.49.1
  • libgnutls26 >= 2.4.1-24.39.49.1
  • libgnutls26-32bit >= 2.4.1-24.39.49.1
Builds
SAT Patch Nr: 8951
SUSE Linux Enterprise Server 10 SP4 LTSS for x86
  • gnutls >= 1.2.10-13.38.1
  • gnutls-devel >= 1.2.10-13.38.1
Builds
ZYPP Patch Nr: 8790
SUSE Linux Enterprise Server 10 SP4 LTSS for AMD64 and Intel EM64T
SUSE Linux Enterprise Server 10 SP4 LTSS for IBM zSeries 64bit
  • gnutls >= 1.2.10-13.38.1
  • gnutls-32bit >= 1.2.10-13.38.1
  • gnutls-devel >= 1.2.10-13.38.1
  • gnutls-devel-32bit >= 1.2.10-13.38.1
Builds
ZYPP Patch Nr: 8790
SUSE Manager 1.7 for SLE 11 SP2
  • gnutls >= 2.4.1-24.39.49.1
  • libgnutls-extra26 >= 2.4.1-24.39.49.1
  • libgnutls26 >= 2.4.1-24.39.49.1
  • libgnutls26-32bit >= 2.4.1-24.39.49.1
Builds
SAT Patch Nr: 9028
SUSE Linux Enterprise Server 10 SP3 LTSS for x86
  • gnutls >= 1.2.10-13.38.1
  • gnutls-devel >= 1.2.10-13.38.1
Builds
ZYPP Patch Nr: 8789
SUSE Linux Enterprise Server 10 SP3 LTSS for AMD64 and Intel EM64T
SUSE Linux Enterprise Server 10 SP3 LTSS for IBM zSeries 64bit
  • gnutls >= 1.2.10-13.38.1
  • gnutls-32bit >= 1.2.10-13.38.1
  • gnutls-devel >= 1.2.10-13.38.1
  • gnutls-devel-32bit >= 1.2.10-13.38.1
Builds
ZYPP Patch Nr: 8789
SUSE Linux Enterprise High Availability Extension 11 SP3
  • libgnutls-extra26 >= 2.4.1-24.39.49.1
Builds
SAT Patch Nr: 8949
SUSE Linux Enterprise Software Development Kit 11 SP3
  • libgnutls-devel >= 2.4.1-24.39.49.1
  • libgnutls-extra-devel >= 2.4.1-24.39.49.1
  • libgnutls-extra26 >= 2.4.1-24.39.49.1
Builds
SAT Patch Nr: 8949
SUSE Linux Enterprise Desktop 11 SP3
  • gnutls >= 2.4.1-24.39.49.1
  • libgnutls26 >= 2.4.1-24.39.49.1
Builds
SAT Patch Nr: 8949
SUSE Linux Enterprise Desktop 11 SP3
  • gnutls >= 2.4.1-24.39.49.1
  • libgnutls26 >= 2.4.1-24.39.49.1
  • libgnutls26-32bit >= 2.4.1-24.39.49.1
Builds
SAT Patch Nr: 8949
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP3 for VMware
  • gnutls >= 2.4.1-24.39.49.1
  • libgnutls-extra26 >= 2.4.1-24.39.49.1
  • libgnutls26 >= 2.4.1-24.39.49.1
Builds
SAT Patch Nr: 8949
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP3 for VMware
  • gnutls >= 2.4.1-24.39.49.1
  • libgnutls-extra26 >= 2.4.1-24.39.49.1
  • libgnutls26 >= 2.4.1-24.39.49.1
  • libgnutls26-32bit >= 2.4.1-24.39.49.1
Builds
SAT Patch Nr: 8949
SUSE Linux Enterprise Server 11 SP3
  • gnutls >= 2.4.1-24.39.49.1
  • libgnutls-extra26 >= 2.4.1-24.39.49.1
  • libgnutls26 >= 2.4.1-24.39.49.1
  • libgnutls26-x86 >= 2.4.1-24.39.49.1
Builds
SAT Patch Nr: 8949
SUSE Linux Enterprise Server 11 SP2 LTSS
  • gnutls >= 2.4.1-24.39.49.1
  • libgnutls-extra26 >= 2.4.1-24.39.49.1
  • libgnutls26 >= 2.4.1-24.39.49.1
Builds
SAT Patch Nr: 8950
SUSE Linux Enterprise Server 11 SP2 LTSS
  • gnutls >= 2.4.1-24.39.49.1
  • libgnutls-extra26 >= 2.4.1-24.39.49.1
  • libgnutls26 >= 2.4.1-24.39.49.1
  • libgnutls26-32bit >= 2.4.1-24.39.49.1
Builds
SAT Patch Nr: 8950

© 2014 Novell