Red Hat found a goto fail vulnerability in GnuTLS

Red Hat security audit found that the widely used security class library GnuTLS has a vulnerability and cannot correctly verify specific forged SSL certificates. Therefore, attackers can exploit this vulnerability to launch man-in-the-middle attacks, it identifies this type of forged certificate as a valid certificate. GnuTLS is a free software implementation of SSL, TLS, and DTLS protocols. The vulnerability affects all versions of GnuTLS. The only remedy is to upgrade to version 3.2.12 or 3.1.22, or apply patches to the 2.x branch. The GnuTLS error is similar to the goto fail SSL Certificate handling problem of iOS and OSX systems recently fixed by Apple.