DSA-1935-1

NameDSA-1935-1
SourceDebian
Descriptiongnutls13 gnutls26 - SSL certificate
ReferencesCVE-2009-2409, CVE-2009-2730
Debian/oldstablepackage gnutls13 is fixed in oldstable-security.
Debian/stablenot vulnerable
Debian/testingnot known to be vulnerable
Debian/unstablenot known to be vulnerable.

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
gnutls13 (PTS)etch1.4.4-3+etch4vulnerable
etch (security)1.4.4-3+etch5fixed
gnutls26 (PTS)lenny, lenny (security)2.4.2-6+lenny2fixed

The next table lists affected binary packages.

Binary PackageReleaseVersionStatusArchitecures
gnutls-bin, libgnutls-dev, libgnutls13, libgnutls13-dbgetch1.4.4-3+etch4vulnerablealpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390, sparc
etch (security)1.4.4-3+etch5fixedalpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390, sparc
gnutls-bin, libgnutls-dev, libgnutls26, libgnutls26-dbglenny, lenny (security)2.4.2-6+lenny2fixedalpha, amd64, arm, armel, hppa, i386, ia64, mips, mipsel, powerpc, s390, sparc
gnutls-docetch1.4.4-3+etch4vulnerableall
etch (security)1.4.4-3+etch5fixedall
lenny, lenny (security)2.4.2-6+lenny2fixedall
guile-gnutlslenny, lenny (security)2.4.2-6+lenny2fixedalpha, amd64, arm, armel, hppa, i386, mips, mipsel, powerpc, s390, sparc

The information above is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
gnutls13sourceetch1.4.4-3+etch5unknown
gnutls26sourcelenny2.4.2-6+lenny2unknown

Search for package or bug name: Reporting problems

Home - Testing Security Team - Debian Security - Imprint