TI-2026-03321 CVE-2026-3833 · GHSA-6rgh-57xm-37v8
Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison
Priority HIGH 72
A flaw was found in gnutls.
RHSA-2026:26409
gnutls security update
Released 2026-06-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) gnutls-c++-3.8.9-9.el10_0.19, gnutls-dane-3.8.9-9.el10_0.19, gnutls-devel-3.8.9-9.el10_0.19 +2
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) gnutls-3.8.9-9.el10_0.19
Fixes 13 records
TI-2026-03320 CVE-2026-3832 · GHSA-3rqj-4qqw-jgwr
Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response
Priority MEDIUM 51
A flaw was found in gnutls.
TI-2026-26211 CVE-2026-33845 · GHSA-cmj5-x3xf-69wq
Gnutls: gnutls: denial of service via dtls zero-length fragment
Priority MEDIUM 49
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read.
TI-2026-30398 CVE-2026-42010 · GHSA-m3r7-xjq8-gc4r
Gnutls: gnutls: authentication bypass via nul character in username
Priority MEDIUM 44
A flaw was found in gnutls.
TI-2026-04595 CVE-2026-5260 · GHSA-6hj5-4cv5-f46x
Gnutls: gnutls: information disclosure via heap overread in rsa key exchange
Priority MEDIUM 43
A flaw was found in libgnutls.
TI-2026-30401 CVE-2026-42013 · GHSA-2pw7-g86g-76q7
Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name
Priority MEDIUM 42
A flaw was found in gnutls.
TI-2026-30397 CVE-2026-42009 · GHSA-9gx7-g5hv-xjjj
Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
Priority MEDIUM 42
A flaw was found in gnutls.
TI-2026-26212 CVE-2026-33846 · GHSA-qcj7-gqxf-2cqq
Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
Priority MEDIUM 41
A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS.
TI-2026-30399 CVE-2026-42011 · GHSA-568w-37qx-3qc6
Gnutls: gnutls: security bypass due to incorrect name constraint handling
Priority LOW 35
A flaw was found in gnutls.
TI-2026-30403 CVE-2026-42015 · GHSA-45p2-c2m2-2656
Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling
Priority LOW 31
A flaw was found in gnutls.
TI-2026-30400 CVE-2026-42012 · GHSA-7hhj-8fwv-m5hc
Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans
Priority LOW 31
A flaw was found in gnutls.
TI-2026-30402 CVE-2026-42014 · GHSA-m4m5-7xc2-xc7g
Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin
Priority LOW 28
A flaw was found in GnuTLS.
TI-2026-04746 CVE-2026-5419 · GHSA-6452-5wg5-m56r
Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal
Priority LOW 18
A flaw was found in gnutls.