gpp_maybe Security update for gnutls

SUSE-SL-Micro-6.2-776

This update for gnutls fixes the following issues - CVE-2026-3832: cert-session: fix multi-entry OCSP revocation bypass (bsc#1263706). - CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707). - CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715). - CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716). - CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704). - CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705). - CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708). - CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709). - CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710). - CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711). - CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712). - CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713). - CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).

Release Date

May 18 2026
References

Bugzilla: 1263704, 1263705, 1263706, 1263707, 1263708, 1263709, 1263710, 1263711, 1263712, 1263713, 1263714, 1263715, 1263716
CVEs: CVE-2026-3832, CVE-2026-3833, CVE-2026-5260, CVE-2026-5419, CVE-2026-33845, CVE-2026-33846, CVE-2026-42009, CVE-2026-42010, CVE-2026-42011, CVE-2026-42012, CVE-2026-42013, CVE-2026-42014, CVE-2026-42015
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Micro 6.2 ppc64le

Packages

gnutls
The GNU Transport Layer Security Library

3.8.10-160000.3.1 lock rpm

libgnutls30
The GNU Transport Layer Security Library

3.8.10-160000.3.1 lock rpm

SUSE Linux Micro 6.2 aarch64

Packages

gnutls
The GNU Transport Layer Security Library

3.8.10-160000.3.1 lock rpm

libgnutls30
The GNU Transport Layer Security Library

3.8.10-160000.3.1 lock rpm

SUSE Linux Micro 6.2 s390x

Packages

gnutls
The GNU Transport Layer Security Library

3.8.10-160000.3.1 lock rpm

libgnutls30
The GNU Transport Layer Security Library

3.8.10-160000.3.1 lock rpm

SUSE Linux Micro 6.2 x86_64

Packages

gnutls
The GNU Transport Layer Security Library

3.8.10-160000.3.1 lock rpm

libgnutls30
The GNU Transport Layer Security Library

3.8.10-160000.3.1 lock rpm