It was reported that under certain conditions mod_gnutls ignores "GnuTLSClientVerify require" when specified in directory [1] and server [2] context. Suggested commit that fixes [2] is: https://github.com/airtower-luna/mod_gnutls/commit/5a8a32bbfb8a83fe6358c5c31c443325a7775fc2 Patch for [1] is attaced in the corresponding bugreport. [1]: http://issues.outoforder.cc/view.php?id=93 [2]: https://bugs.debian.org/578663
Created mod_gnutls tracking bugs for this issue: Affects: fedora-all [bug 1197128]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.