Bug#501077: gnutls: openssl-compat out of bounds memory access when getting certificate issuer DN

Fri Oct 3 21:50:48 UTC 2008

Package: gnutls26
Version: 2.4.2-1
Severity: important

Hi,

gnutls openssl-compat library has a similar problem as lynx-cur's
reported in #499945. Attached is a verbose description and patch.
The typical failure condition is when the certificate chain has length
one (as in the case discussed in #499945).

Kind regards

T.
-- 
Thomas Viehmann, http://thomas.viehmann.net/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: gnutls.diff
Type: text/x-patch
Size: 1187 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20081003/c1c1bf4d/attachment.bin 