https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:29:05.360058+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:20611 ALSA-2026:20611 — Important: gnutls security update 2026-10-02T11:29:05.452268+00:00

Affected: AlmaLinux:8: gnutls, AlmaLinux:8: gnutls-c++, AlmaLinux:8: gnutls-dane, AlmaLinux:8: gnutls-devel, AlmaLinux:8: gnutls-utils

Please update the gnutls packages to provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: Add more checks to DTLS reassembly (CVE-2026-33846) * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009) * gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845) * gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010) * gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833) * gnutls: Fix intersecting empty constraints (CVE-2026-42011)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-09661 bdu:2026-09661 2026-10-02T11:29:05.452358+00:00 bdu:2026-09661 https://cve.radiocsirt.org/vuln/bell-cve-2026-42011 BELL-CVE-2026-42011 2026-10-02T11:29:05.452376+00:00

Affected: Alpaquita:23: gnutls, Alpaquita:25: gnutls, Alpaquita:stream: gnutls

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1094 certfr-2026-avi-1094 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T11:29:05.452398+00:00 certfr-2026-avi-1094 https://cve.radiocsirt.org/vuln/euvd-2026-382046 EUVD-2026-382046 2026-10-02T11:29:05.452413+00:00 EUVD-2026-382046 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42011 fkie_cve-2026-42011 2026-10-02T11:29:05.452425+00:00

A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.

 https://cve.radiocsirt.org/vuln/ghsa-568w-37qx-3qc6 GHSA-568w-37qx-3qc6 2026-10-02T11:29:05.452447+00:00

A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-42011 msrc_CVE-2026-42011 — Gnutls: gnutls: security bypass due to incorrect name constraint handling 2026-10-02T11:29:05.452462+00:00 msrc_CVE-2026-42011 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10691-1 openSUSE-SU-2026:10691-1 — gnutls-3.8.13-1.1 on GA media 2026-10-02T11:29:05.452478+00:00

gnutls-3.8.13-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:13274 RHSA-2026:13274 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T11:29:05.452500+00:00

gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison gnutls: gnutls: Information disclosure via heap overread in RSA key exchange gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability gnutls: gnutls: Authentication Bypass via NUL Character in Username gnutls: gnutls: Security bypass due to incorrect name constraint handling gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

 https://cve.radiocsirt.org/vuln/rlsa-2026:20612 RLSA-2026:20612 — Important: gnutls security update 2026-10-02T11:29:05.452538+00:00

Affected: Rocky Linux:9: gnutls

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009) * gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845) * gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010) * gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833) * gnutls: Fix intersecting empty name constraints (CVE-2026-42011) * gnutls: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly (CVE-2026-33846)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/suse-su-2026:21752-1 SUSE-SU-2026:21752-1 — Security update for gnutls 2026-10-02T11:29:05.452564+00:00

Security update for gnutls

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-42011 UBUNTU-CVE-2026-42011 2026-10-02T11:29:05.452585+00:00

Affected: Ubuntu:Pro:18.04:LTS: gnutls28, Ubuntu:Pro:20.04:LTS: gnutls28, Ubuntu:22.04:LTS: gnutls28, Ubuntu:Pro:FIPS-preview:22.04:LTS: gnutls28, Ubuntu:Pro:FIPS-updates:22.04:LTS: gnutls28, Ubuntu:24.04:LTS: gnutls28, Ubuntu:Pro:FIPS-updates:24.04:LTS: gnutls28, Ubuntu:25.10: gnutls28, Ubuntu:26.04:LTS: gnutls28

A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1312 WID-SEC-W-2026-1312 — GnuTLS: Mehrere Schwachstellen 2026-10-02T11:29:05.452618+00:00

Ein Angreifer kann mehrere Schwachstellen in GnuTLS ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder andere, nicht näher spezifizierte Angriffe durchzuführen.