CLSA-2026-1785847037

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1785847037.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1785847037
Upstream
CVE (5)
Published
2026-08-27T16:43:59Z
Modified
2026-10-26T09:43:36Z
Summary
gnutls: Fix of 4 CVEs
Details
  • CVE-2026-42009: fix DTLS handshake_compare qsort comparator contract violation (undefined behaviour)
  • CVE-2026-33846: add DTLS reassembly fragment length/bounds checks (heap overwrite)
  • CVE-2026-42012: URI subjectAltName now precludes Common Name fallback in hostname verification
  • CVE-2026-42013: oversized subjectAltName now precludes Common Name fallback in hostname verification
  • CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread
References

Affected packages

TuxCare:OracleLinux:7
gnutls

Package

Name
gnutls
Purl
pkg:rpm/tuxcare/gnutls?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.29-9.el7_6.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1785847037.json"
gnutls-c++

Package

Name
gnutls-c++
Purl
pkg:rpm/tuxcare/gnutls-c++?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.29-9.el7_6.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1785847037.json"
gnutls-dane

Package

Name
gnutls-dane
Purl
pkg:rpm/tuxcare/gnutls-dane?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.29-9.el7_6.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1785847037.json"
gnutls-devel

Package

Name
gnutls-devel
Purl
pkg:rpm/tuxcare/gnutls-devel?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.29-9.el7_6.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1785847037.json"
gnutls-utils

Package

Name
gnutls-utils
Purl
pkg:rpm/tuxcare/gnutls-utils?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.29-9.el7_6.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1785847037.json"