[CLSA-2026:1791497467] gnutls: Fix of CVE-2026-42011
Type:
security
Severity:
Important
Release date:
2026-10-08 22:11:17 UTC
Description:
- CVE-2026-42011: a CA carrying only excluded name constraints, or permitted ones of another name type, no longer causes the permitted name constraints of a CA below it to be dropped during chain verification. This corrects the els1 entry: 3.3.29 is affected through the APPEND path of gnutls_x509_ext_import_name_constraints()
CVEs fixed:
Updated packages:
  • gnutls-3.3.29-9.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:65d89b4353e698b1614b3e722616b364aac1d95c336e2d1f4afaf574a4ba07c0
  • gnutls-3.3.29-9.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:15ef9863246b055b93ea0ffbc1b7bc60efe12630a8f0455f4cffedb639e0a027
  • gnutls-c++-3.3.29-9.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:a65618e1ccb5baa4fd985ad5418189e3af822ab9c404b04b6c4395fcbadb61da
  • gnutls-c++-3.3.29-9.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:f3747a5c5d382e7dc0837a82abbf53395528f00006360c8c14fcacfd71279958
  • gnutls-dane-3.3.29-9.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:4ea0c5c491ca968d4fc8a8a9e5d138739e3464417666aa55788cb7742e8853dd
  • gnutls-dane-3.3.29-9.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:612519d033a7e2681856707ac20e4778804a3eb7f5ac6664017e4f59e34746be
  • gnutls-devel-3.3.29-9.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:3a19d5798be2abc00532ae3819ce7b54116d0a5154b66ed953c300dc729ccd80
  • gnutls-devel-3.3.29-9.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:c522533eb252b67f6ef0c19dddada59b04536489d9fc5192a97f950ee1689ee6
  • gnutls-utils-3.3.29-9.0.3.el7_9.tuxcare.els2.i686.rpm
    sha:a3ddd0922cf91c481e1c88f04f6f1ffa4f08c49d4d62eecd98b5654045a3d8c6
  • gnutls-utils-3.3.29-9.0.3.el7_9.tuxcare.els2.x86_64.rpm
    sha:80f12f0bfe91f3689478aa6aff02276c7498590cbffc6e0e06d8c9c589a42c70
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.