[CLSA-2026:1791497901] gnutls: Fix of CVE-2026-42011
Type:
security
Severity:
Important
Release date:
2026-10-08 22:18:30 UTC
Description:
- CVE-2026-42011: a CA carrying only excluded name constraints, or permitted ones of another name type, no longer causes the permitted name constraints of a CA below it to be dropped during chain verification. This corrects the els1 entry: 3.3.29 is affected through the APPEND path of gnutls_x509_ext_import_name_constraints()
CVEs fixed:
Updated packages:
  • gnutls-3.3.29-9.0.3.el7_6.tuxcare.els2.i686.rpm
    sha:17d0dd5b6b94bfff4e51fffe22a0a50544ce52e682ace48d5a2f6b96622f3145
  • gnutls-3.3.29-9.0.3.el7_6.tuxcare.els2.x86_64.rpm
    sha:bb2977e8a1e20858e89782d2363ec89447a929b4d09ca99cc206b327c8c3ff09
  • gnutls-c++-3.3.29-9.0.3.el7_6.tuxcare.els2.i686.rpm
    sha:ef6914311214c199f429ecfceac981e9ef3664a3cd26c605d3167ead241c8fb1
  • gnutls-c++-3.3.29-9.0.3.el7_6.tuxcare.els2.x86_64.rpm
    sha:62f0adf3a2bf000d6cf455cb810e6b9762597605e1b138a13ddbb145b87a9a96
  • gnutls-dane-3.3.29-9.0.3.el7_6.tuxcare.els2.i686.rpm
    sha:5dfbfd7dec4bf9584451774a43d035561bbe1a95a50d6e6c94508ce66bf46b6a
  • gnutls-dane-3.3.29-9.0.3.el7_6.tuxcare.els2.x86_64.rpm
    sha:7f330c3112c5df948b453baf398d8b456721f0827ee1db798d96557c809285e5
  • gnutls-devel-3.3.29-9.0.3.el7_6.tuxcare.els2.i686.rpm
    sha:1851ab0f8b98a4ca6478ef9b67a13c4ae0a891baed319997b77489e6bc8203d4
  • gnutls-devel-3.3.29-9.0.3.el7_6.tuxcare.els2.x86_64.rpm
    sha:cba006a8dea3b7be9e671d1e9374b9d67f286ee77b3ef16469399d8fce851fac
  • gnutls-utils-3.3.29-9.0.3.el7_6.tuxcare.els2.i686.rpm
    sha:e19f2c204fb261f95c5c26f2f47aeed5609d7991229965262b228b7acd29daab
  • gnutls-utils-3.3.29-9.0.3.el7_6.tuxcare.els2.x86_64.rpm
    sha:a7660190cbfb496f278fa81bdba8d78991ffa5fbb0d539217eeeca5b3182b5fb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.