An audit conducted by Red Hat has turned up an SSL certificate verification vulnerability in all versions of GnuTLS.