[CLSA-2026:1790280771] gnutls: Fix of 10 CVEs
Type:
security
Severity:
None
Release date:
2026-09-24 20:13:00 UTC
Description:
- Rebased onto the vendor 3.3.29-9.0.3.el7_9 sources - CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread (TuxCare fix retained) - CVE-2026-42014 and CVE-2026-42015 are fixed by the vendor in this build - CVE-2026-42011 is not applicable to this baseline per the vendor assessment - CVE-2026-33845, CVE-2026-33846, CVE-2026-3833, CVE-2026-42009, CVE-2026-42012 and CVE-2026-42013 are now fixed by the vendor; the TuxCare duplicates are dropped - CVE-2026-3833 follow-up: the vendor's email_matches() no longer matches a bare-domain rfc822Name against a bare-domain constraint of the same length, which 3.3.29 did; restore that comparison, case-insensitively, and add the assertions to tests/name-constraints.c
Updated packages:
  • gnutls-3.3.29-9.0.3.el7_9.tuxcare.els1.i686.rpm
    sha:6640ee0f502ef56e1b90209e4f60a72d194d83729ad07592f009d1e085fc975b
  • gnutls-3.3.29-9.0.3.el7_9.tuxcare.els1.x86_64.rpm
    sha:423b9c971b5a76eb35083ae03ecf1acb637895febeeed4a58034d4aece6a2d79
  • gnutls-c++-3.3.29-9.0.3.el7_9.tuxcare.els1.i686.rpm
    sha:f6ada840321274559f1efd057e8ef1127f4c74ba6a10c3cd26e70eac4e6f57ec
  • gnutls-c++-3.3.29-9.0.3.el7_9.tuxcare.els1.x86_64.rpm
    sha:ad2d7823296df0a8cf488f7a86565429158de7dfe91653bea49c5b27a6fe1f23
  • gnutls-dane-3.3.29-9.0.3.el7_9.tuxcare.els1.i686.rpm
    sha:670e32aab3d239e3e4a7bfb9598ecc02e6920ff3f823c658ae788050a3a192d4
  • gnutls-dane-3.3.29-9.0.3.el7_9.tuxcare.els1.x86_64.rpm
    sha:96c9224e6fb2e605d94bd0a5e625eb6d6857ce549fa750dece8f32dcce7764d0
  • gnutls-devel-3.3.29-9.0.3.el7_9.tuxcare.els1.i686.rpm
    sha:2c9b463316fe508ce958a5a4982d0894f91ba4cbe1d5d0dc0c399d8039d606e9
  • gnutls-devel-3.3.29-9.0.3.el7_9.tuxcare.els1.x86_64.rpm
    sha:dc82f58ec84749633511ccb0a7d469312fcf5aafadca5045f8fc6f56f2672905
  • gnutls-utils-3.3.29-9.0.3.el7_9.tuxcare.els1.i686.rpm
    sha:dd2eae0474d90f5cd7f5c620570c05ed1e02bf2d2a5db437bc8bf40b327be467
  • gnutls-utils-3.3.29-9.0.3.el7_9.tuxcare.els1.x86_64.rpm
    sha:2c6435251b0beb677342395620d69797fa9bd3f86abb17bbe3e16c962dc84f08
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.