gpp_maybe
Security update for gnutls
SUSE-SLE-Micro-6.0-725
This update for gnutls fixes the following issues - CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707). - CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715). - CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716). - CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704). - CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705). - CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708). - CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709). - CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710). - CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711). - CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712). - CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713). - CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).
-
Release DateMay 22 2026
-
ReferencesBugzilla: 1263704, 1263705, 1263707, 1263708, 1263709, 1263710, 1263711, 1263712, 1263713, 1263714, 1263715, 1263716
CVEs: CVE-2026-3833, CVE-2026-5260, CVE-2026-5419, CVE-2026-33845, CVE-2026-33846, CVE-2026-42009, CVE-2026-42010, CVE-2026-42011, CVE-2026-42012, CVE-2026-42013, CVE-2026-42014, CVE-2026-42015 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Micro 6.0 x86_64
-
Packagesgnutls
The GNU Transport Layer Security Librarylibgnutls303.8.3-7.1 lock rpm
The GNU Transport Layer Security Library3.8.3-7.1 lock rpm
SUSE Linux Micro 6.0 aarch64
-
Packagesgnutls
The GNU Transport Layer Security Librarylibgnutls303.8.3-7.1 lock rpm
The GNU Transport Layer Security Library3.8.3-7.1 lock rpm
SUSE Linux Micro 6.0 s390x
-
Packagesgnutls
The GNU Transport Layer Security Librarylibgnutls303.8.3-7.1 lock rpm
The GNU Transport Layer Security Library3.8.3-7.1 lock rpm