Red Hat Security AdvisoryRHSA-2026:34372
gnutls security update
Released 2026-07-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7 ELS) gnutls-3.3.29-9.el7_9.1, gnutls-3.3.29-9.el7_9.1.ppc, gnutls-c++-3.3.29-9.el7_9.1 +6
Fixes 3 records
Priority MEDIUM 49
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02073 · Published 2026-04-30 · Partial fix · 3.8.13, 3.8.10-4.el10_2 +45 CWE-191
Priority MEDIUM 42
A flaw was found in gnutls.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01335 · Published 2026-05-18 · Partial fix · 3.8.13, 3.8.10-4.el10_2 +48 CWE-475
Priority MEDIUM 41
A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01263 · Published 2026-05-04 · Partial fix · 3.8.10-4.el10_2, 3.8.9-9.el10_0.19 +44 CWE-130
