[ALSA-2026:20613] Important: gnutls security update
Type:
security
Severity:
important
Release date:
2026-07-08
Description:
The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009) * gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845) * gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010) * gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833) * gnutls: Fix intersecting empty name constraints (CVE-2026-42011) * gnutls: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly (CVE-2026-33846) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 gnutls-fips-3.8.10-4.el10_2.aarch64.rpm 1b52a585e4043d25fe3be03487c0c2ce9c89449c2bad68b5542b02467042671a
aarch64 gnutls-devel-3.8.10-4.el10_2.aarch64.rpm 84573f2d04f825a7bbaef8711461c0cf4e2c1cc6e8af1a2668477ed9cd4f4984
aarch64 gnutls-dane-3.8.10-4.el10_2.aarch64.rpm 89d5b706db4bee8fc3ffba4de756cf5a5ca5f27a481a7e8e1fbe54cc8a1ff915
aarch64 gnutls-c++-3.8.10-4.el10_2.aarch64.rpm a2d9065f01739cf0753a14422b181dfab8e81b2ca0090f513ce942fbcb0f79ea
aarch64 gnutls-3.8.10-4.el10_2.aarch64.rpm bf6127e4d56e1f52d18681d2b69226e213e96c1f6100515068c29c15b2c5d50c
aarch64 gnutls-utils-3.8.10-4.el10_2.aarch64.rpm fa1d589c3a3b71e54a3cd7815b08af7e8b185790018517f12485f0a145dc2104
ppc64le gnutls-dane-3.8.10-4.el10_2.ppc64le.rpm 56110f356e07afb95458397a1ca0b9b815e9651eed80f65f09859b0004ec389c
ppc64le gnutls-devel-3.8.10-4.el10_2.ppc64le.rpm 762828269076aceeed537792f4d4490e33968444a427b13b937e6876fa64643f
ppc64le gnutls-3.8.10-4.el10_2.ppc64le.rpm 979b9b03f9780976eb75f74d9f265296dae5ae335be21fdf52e46ecf9d8392a5
ppc64le gnutls-c++-3.8.10-4.el10_2.ppc64le.rpm a3d751fe1f9b5001215934de50a7fbd17d21ed3e5645b4834fb38f7c6a754a0e
ppc64le gnutls-utils-3.8.10-4.el10_2.ppc64le.rpm ae05704c952a9e262eed3be4ca928ac157063be937d714f0d4067697e2a9ffc0
ppc64le gnutls-fips-3.8.10-4.el10_2.ppc64le.rpm e6fc492f0fe20934cd02026cbc5d062da0de75b8e88c83fbc991cf8110ef93ce
s390x gnutls-utils-3.8.10-4.el10_2.s390x.rpm 60757effda46afbb6fca0755ea6af28ca96ce81ae4fba96c39d4efc98ba1b954
s390x gnutls-3.8.10-4.el10_2.s390x.rpm 6c939e7b21631c3b88f94c68e20a4642fdb7cac788591af0cdfc4d886175e4be
s390x gnutls-fips-3.8.10-4.el10_2.s390x.rpm 94103e73cfd4805cf4c55b24a7c4b061f692a457d9dc9f5ee56310cb2ad44b19
s390x gnutls-c++-3.8.10-4.el10_2.s390x.rpm a69a813ca7d4d8766dada811b02814cab9fd3f55f92496ecd48c5468ef8e2895
s390x gnutls-devel-3.8.10-4.el10_2.s390x.rpm a7b0892ec516bc3998611c6f57350d49e1b44a4070fc79a82ebfdd588ea108ad
s390x gnutls-dane-3.8.10-4.el10_2.s390x.rpm f1a3c6b05883932c2eb5b9f8d80a37653f6d593ed47aa458f5b461e1ab9b8c49
x86_64 gnutls-utils-3.8.10-4.el10_2.x86_64.rpm 06769362fc2633a09d4f8240f7c784ff3417dafb0ea3cc7e6eb3b88c0e6a14bc
x86_64 gnutls-c++-3.8.10-4.el10_2.x86_64.rpm 6efeb1299ed24bbf94f3a2ceca630eeb488fedacee9ab994c5dd5586ba4e8188
x86_64 gnutls-dane-3.8.10-4.el10_2.x86_64.rpm 70e0709d06a1aedd9cfa4deeaa00f897f0d981f9eeeda4f94b05d3861f512d42
x86_64 gnutls-3.8.10-4.el10_2.x86_64.rpm 8016d4300c69be43057ef4004d5adc942612443b0d477ba3b7f19e73c0e6a7b8
x86_64 gnutls-fips-3.8.10-4.el10_2.x86_64.rpm 97cc90bf3a2dee3e15a8d077fcc1b5afa23c7ee5861d8e552f141bf0b3fd81e8
x86_64 gnutls-devel-3.8.10-4.el10_2.x86_64.rpm df7458ad8419d2e6846d296a2cb4d829a3666697cdfc80305a0c7ed774ff16cf
x86_64_v2 gnutls-c++-3.8.10-4.el10_2.x86_64_v2.rpm 2d027dda8502f115398726b10a3465d2e0069d6a34e2b97e41eb2ac78958283f
x86_64_v2 gnutls-3.8.10-4.el10_2.x86_64_v2.rpm 4241bd98588e293f1d9258eb495459167fe5ef3eaaa358a30c2b69493f87f3f6
x86_64_v2 gnutls-fips-3.8.10-4.el10_2.x86_64_v2.rpm 432306d96462fd56e3d9e707ff7d2ea717b614f425a0093eb6b35ca384bea0c9
x86_64_v2 gnutls-utils-3.8.10-4.el10_2.x86_64_v2.rpm 7338df771166dbacae6212d9f5746b97da00e92a5bd6aa0801dbcc9d9402aed0
x86_64_v2 gnutls-devel-3.8.10-4.el10_2.x86_64_v2.rpm 7ce7bd6e657c0b156eb26b530561d513823c319b3f0706c3f593cec42550adce
x86_64_v2 gnutls-dane-3.8.10-4.el10_2.x86_64_v2.rpm e6cd034a6e65409ce94ea1403e9a8120f773b0fdcc63da61ade0755bddd73353
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.