oval:org.mitre.oval:def:24046

Definition Id: oval:org.mitre.oval:def:24046

Oval ID:	oval:org.mitre.oval:def:24046
Title:	DEPRECATED: ELSA-2014:0246: gnutls security update (Important)
Description:	The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security (TLS). It was discovered that GnuTLS did not correctly handle certain errors that could occur during the verification of an X.509 certificate, causing it to incorrectly report a successful verification. An attacker could use this flaw to create a specially crafted certificate that could be accepted by GnuTLS as valid for a site chosen by the attacker. (CVE-2014-0092) The CVE-2014-0092 issue was discovered by Nikos Mavrogiannopoulos of the Red Hat Security Technologies Team. Users of GnuTLS are advised to upgrade to these updated packages, which correct this issue. For the update to take effect, all applications linked to the GnuTLS library must be restarted.
Family:	unix	Class:	patch
Reference(s):	ELSA-2014:0246-01 CVE-2014-0096	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	gnutls
Definition Synopsis:
Oracle Linux 6.x rpm test gnutls-guile is earlier than 0:2.8.5-13.el6_5 AND gnutls-utils is earlier than 0:2.8.5-13.el6_5 AND gnutls-devel is earlier than 0:2.8.5-13.el6_5 AND gnutls is earlier than 0:2.8.5-13.el6_5

Definition Id: oval:org.mitre.oval:def:24508

Oval ID:	oval:org.mitre.oval:def:24508
Title:	ELSA-2014:0246: gnutls security update (Important)
Description:	The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security (TLS). It was discovered that GnuTLS did not correctly handle certain errors that could occur during the verification of an X.509 certificate, causing it to incorrectly report a successful verification. An attacker could use this flaw to create a specially crafted certificate that could be accepted by GnuTLS as valid for a site chosen by the attacker. (CVE-2014-0092) The CVE-2014-0092 issue was discovered by Nikos Mavrogiannopoulos of the Red Hat Security Technologies Team. Users of GnuTLS are advised to upgrade to these updated packages, which correct this issue. For the update to take effect, all applications linked to the GnuTLS library must be restarted.
Family:	unix	Class:	patch
Reference(s):	ELSA-2014:0246-00 CVE-2014-0092	Version:	5
Platform(s):	Oracle Linux 6	Product(s):	gnutls
Definition Synopsis:
Oracle Linux 6.x rpm test gnutls-devel is earlier than 0:2.8.5-13.el6_5 AND gnutls-utils is earlier than 0:2.8.5-13.el6_5 AND gnutls is earlier than 0:2.8.5-13.el6_5 AND gnutls-guile is earlier than 0:2.8.5-13.el6_5

Definition Id: oval:org.mitre.oval:def:16594

Oval ID:	oval:org.mitre.oval:def:16594
Title:	Oracle Linux 6.x
Description:	The operating system installed on the system is Oracle Linux 6.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:oracle:linux:6	Version:	5
Platform(s):	Oracle Linux 6	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND Oracle Linux 6.x is installed
Referenced By:
oval:org.mitre.oval:def:24046 oval:org.mitre.oval:def:24508