CLSA-2026-1790280771

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790280771.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1790280771
Upstream
CVE (10)
Published
2026-09-24T20:13:00Z
Modified
2026-10-26T09:43:38Z
Summary
gnutls: Fix of 10 CVEs
Details
  • Rebased onto the vendor 3.3.29-9.0.3.el7_9 sources
  • CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread (TuxCare fix retained)
  • CVE-2026-42014 and CVE-2026-42015 are fixed by the vendor in this build
  • CVE-2026-42011 is not applicable to this baseline per the vendor assessment
  • CVE-2026-33845, CVE-2026-33846, CVE-2026-3833, CVE-2026-42009, CVE-2026-42012 and CVE-2026-42013 are now fixed by the vendor; the TuxCare duplicates are dropped
  • CVE-2026-3833 follow-up: the vendor's email_matches() no longer matches a bare-domain rfc822Name against a bare-domain constraint of the same length, which 3.3.29 did; restore that comparison, case-insensitively, and add the assertions to tests/name-constraints.c
References

Affected packages

TuxCare:OracleLinux:7
gnutls

Package

Name
gnutls
Purl
pkg:rpm/tuxcare/gnutls?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.29-9.0.3.el7_9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790280771.json"
gnutls-c++

Package

Name
gnutls-c++
Purl
pkg:rpm/tuxcare/gnutls-c++?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.29-9.0.3.el7_9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790280771.json"
gnutls-dane

Package

Name
gnutls-dane
Purl
pkg:rpm/tuxcare/gnutls-dane?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.29-9.0.3.el7_9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790280771.json"
gnutls-devel

Package

Name
gnutls-devel
Purl
pkg:rpm/tuxcare/gnutls-devel?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.29-9.0.3.el7_9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790280771.json"
gnutls-utils

Package

Name
gnutls-utils
Purl
pkg:rpm/tuxcare/gnutls-utils?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.29-9.0.3.el7_9.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790280771.json"