[CLSA-2026:1790678814] gnutls: Fix of 10 CVEs
Type:
security
Severity:
None
Release date:
2026-09-29 10:47:03 UTC
Description:
- Rebased onto the vendor 3.3.29-9.0.3.el7_9 sources - CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread (TuxCare fix retained) - CVE-2026-42014 and CVE-2026-42015 are fixed by the vendor in this build - CVE-2026-42011 is not applicable to this baseline per the vendor assessment - CVE-2026-33845, CVE-2026-33846, CVE-2026-3833, CVE-2026-42009, CVE-2026-42012 and CVE-2026-42013 are now fixed by the vendor; the TuxCare duplicates are dropped - CVE-2026-3833 follow-up: the vendor's email_matches() no longer matches a bare-domain rfc822Name against a bare-domain constraint of the same length, which 3.3.29 did; restore that comparison, case-insensitively, and add the assertions to tests/name-constraints.c
Updated packages:
  • gnutls-3.3.29-9.0.3.el7_6.tuxcare.els1.i686.rpm
    sha:a8f4f38534d613a1e15d25dfe1da8cc32c1316155fa5744f4e5436c92e45fc38
  • gnutls-3.3.29-9.0.3.el7_6.tuxcare.els1.x86_64.rpm
    sha:622f3d1a4f3ef193458d512ff8ff135e3f6f4642b62d34aa78a6a5dcf3579cec
  • gnutls-c++-3.3.29-9.0.3.el7_6.tuxcare.els1.i686.rpm
    sha:ca5485b80f1d460ebcbdfaeec6ecbc6b47896b5dfb8639ee754da1968d22cef5
  • gnutls-c++-3.3.29-9.0.3.el7_6.tuxcare.els1.x86_64.rpm
    sha:df01bb85734e2d6046341acd9980765b0d4eeb78fa1f19b6c13323c93ed89e2e
  • gnutls-dane-3.3.29-9.0.3.el7_6.tuxcare.els1.i686.rpm
    sha:cea4af191dcc6e469314d42c581ce2e799db455e7ef90bab31485158bd033387
  • gnutls-dane-3.3.29-9.0.3.el7_6.tuxcare.els1.x86_64.rpm
    sha:b846f8ed1ae3a8a9b2cbec7c8758d28334857a1add58072ea234dfae6a94fb0b
  • gnutls-devel-3.3.29-9.0.3.el7_6.tuxcare.els1.i686.rpm
    sha:4f9219389382b56298f653ef93d1dcdda769eba7f4aafabde8557976850773ab
  • gnutls-devel-3.3.29-9.0.3.el7_6.tuxcare.els1.x86_64.rpm
    sha:60a80cd54d9e06d3e1abe7fb95e27dba044715fdb57a2b96d18a944d8268d625
  • gnutls-utils-3.3.29-9.0.3.el7_6.tuxcare.els1.i686.rpm
    sha:3afb033f6de7f11e7886b77583a318a7069932dd2de345d4bcdc8b6b6ca4a182
  • gnutls-utils-3.3.29-9.0.3.el7_6.tuxcare.els1.x86_64.rpm
    sha:1074699ce5f36c1bb5ad7dd978e79e6e430576d11faa8c449465a8b9de8b31e3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.