RHSA-2026:43575MediumCVSS 8.2

Red Hat Security Advisory: gnutls security update

Published
July 22, 2026
Last Modified
July 22, 2026

🔗 CVE IDs covered (6)

CVE-2026-42011 →CVE-2026-42012 →CVE-2026-42013 →CVE-2026-42014 →CVE-2026-42015 →CVE-2026-3833 →

📋 Description

CVE-2026-3833 — gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison CVE-2026-42011 — gnutls: gnutls: Security bypass due to incorrect name constraint handling CVE-2026-42012 — gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs CVE-2026-42013 — gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name CVE-2026-42014 — gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin CVE-2026-42015 — gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

🔗 References (9)