Summary
The remote host is missing updates announced in
advisory GLSA 200505-04.
Solution
All GnuTLS users should remove the existing installation and upgrade to the latest version:
# emerge --sync
# emerge --unmerge gnutls
# emerge --ask --oneshot --verbose net-libs/gnutls
Due to small API changes with the previous version, please do the following to ensure your applications are using the latest GnuTLS that you just emerged.
# revdep-rebuild --soname-regexp libgnutls.so.1[0-1]
Previously exported RSA keys can be fixed by executing the following command on the key files:
# certtool -k infile outfile
http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200505-04 http://bugs.gentoo.org/show_bug.cgi?id=90726
http://lists.gnupg.org/pipermail/gnutls-dev/2005-April/000858.html
Insight
The GnuTLS library is vulnerable to Denial of Service attacks.
Severity
Classification
-
CVE CVE-2005-1431 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related Vulnerabilities