CVE-2026-3833

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically for dNSName (DNS) or rfc822Name (email) constraints within excludedSubtrees or permittedSubtrees. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically for dNSName (DNS) or rfc822Name (email) constraints within excludedSubtrees or permittedSubtrees. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, and other required structures. The project strives to provide a secure communications back-end, simple to use and integrated with the rest of the base Linux libraries. A back-end designed to work and be secure out of the box, keeping the complexity of TLS and PKI out of application code.

Security Fix(es):

A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing the implementation to allocate a buffer based on a smaller initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because the merge operation does not enforce proper bounds checking against the allocated buffer size, this results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path and can lead to application crashes or potential memory corruption.(CVE-2026-33846)

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically for dNSName (DNS) or rfc822Name (email) constraints within excludedSubtrees or permittedSubtrees. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.(CVE-2026-3833)

(CVE-2026-42009)

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.(CVE-2026-42010)

(CVE-2026-42013)

(CVE-2026-42014)

(CVE-2026-42015)

(CVE-2026-5260)

(CVE-2026-5419)

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, and other required structures. The project strives to provide a secure communications back-end, simple to use and integrated with the rest of the base Linux libraries. A back-end designed to work and be secure out of the box, keeping the complexity of TLS and PKI out of application code.

Security Fix(es):

A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing the implementation to allocate a buffer based on a smaller initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because the merge operation does not enforce proper bounds checking against the allocated buffer size, this results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path and can lead to application crashes or potential memory corruption.(CVE-2026-33846)

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically for dNSName (DNS) or rfc822Name (email) constraints within excludedSubtrees or permittedSubtrees. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.(CVE-2026-3833)

(CVE-2026-42009)

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.(CVE-2026-42010)

(CVE-2026-42013)

(CVE-2026-42014)

(CVE-2026-42015)

(CVE-2026-5260)

(CVE-2026-5419)

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, and other required structures. The project strives to provide a secure communications back-end, simple to use and integrated with the rest of the base Linux libraries. A back-end designed to work and be secure out of the box, keeping the complexity of TLS and PKI out of application code.

Security Fix(es):

A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing the implementation to allocate a buffer based on a smaller initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because the merge operation does not enforce proper bounds checking against the allocated buffer size, this results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path and can lead to application crashes or potential memory corruption.(CVE-2026-33846)

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically for dNSName (DNS) or rfc822Name (email) constraints within excludedSubtrees or permittedSubtrees. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.(CVE-2026-3833)

(CVE-2026-42009)

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.(CVE-2026-42010)

(CVE-2026-42013)

(CVE-2026-42014)

(CVE-2026-42015)

(CVE-2026-5260)

(CVE-2026-5419)

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, and other required structures. The project strives to provide a secure communications back-end, simple to use and integrated with the rest of the base Linux libraries. A back-end designed to work and be secure out of the box, keeping the complexity of TLS and PKI out of application code.

Security Fix(es):

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically for dNSName (DNS) or rfc822Name (email) constraints within excludedSubtrees or permittedSubtrees. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.(CVE-2026-3833)

A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.(CVE-2026-42009)

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.(CVE-2026-42010)

(CVE-2026-42013)

(CVE-2026-42014)

(CVE-2026-42015)

(CVE-2026-5260)

Please update the gnutls packages to provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

• gnutls: Add more checks to DTLS reassembly (CVE-2026-33846)
• gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)
• gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845)
• gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)
• gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833)
• gnutls: Fix intersecting empty constraints (CVE-2026-42011)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

• gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)
• gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845)
• gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)
• gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833)
• gnutls: Fix intersecting empty name constraints (CVE-2026-42011)
• gnutls: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly (CVE-2026-33846)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

• gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)
• gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845)
• gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)
• gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833)
• gnutls: Fix intersecting empty name constraints (CVE-2026-42011)
• gnutls: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly (CVE-2026-33846)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically for dNSName (DNS) or rfc822Name (email) constraints within excludedSubtrees or permittedSubtrees. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.

Please update the gnutls packages to provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

• gnutls: Add more checks to DTLS reassembly (CVE-2026-33846)
• gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)
• gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845)
• gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)
• gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833)
• gnutls: Fix intersecting empty constraints (CVE-2026-42011)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library,
which implements cryptographic algorithms and protocols such as SSL, TLS, and
DTLS.

Security Fix(es):

• gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)
• gnutls: Fix crashing on an underflow with a DTLS datagram

(CVE-2026-33845)

• gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)
• gnutls: Fix case-sensitivity of domain name comparison in name

constraints (CVE-2026-3833)

• gnutls: Fix intersecting empty name constraints (CVE-2026-42011)
• gnutls: Denial of Service via heap buffer overflow in DTLS handshake

fragment reassembly (CVE-2026-33846)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library,
which implements cryptographic algorithms and protocols such as SSL, TLS, and
DTLS.

Security Fix(es):

• gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)
• gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845)
• gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)
• gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833)
• gnutls: Fix intersecting empty name constraints (CVE-2026-42011)
• gnutls: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly (CVE-2026-33846)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

• SECURITY UPDATE: Certificate policy bypass via case-sensitive nameConstraints
  • debian/patches/CVE-2026-3833.patch: replace memcmp with c_strncasecmp in ends_with, email_ends_with, dnsname_matches and email_matches in lib/x509/name_constraints.c so DNS labels and email domains are compared case-insensitively per RFC 5280 7.2
  • CVE-2026-3833

• CVE-2026-3833: fix excludedSubtrees/permittedSubtrees bypass by performing case-insensitive comparison of dNSName and rfc822Name domain labels in X.509 nameConstraints processing

• CVE-2026-3833: fix excludedSubtrees/permittedSubtrees bypass by performing case-insensitive comparison of dNSName and rfc822Name domain labels in X.509 nameConstraints processing

• CVE-2026-3833: fix nameConstraints dNSName/rfc822Name case-sensitive memcmp bypass

• CVE-2026-3833: fix nameConstraints dNSName/rfc822Name case-sensitive memcmp bypass

• CVE-2026-3833: fix excludedSubtrees/permittedSubtrees bypass by performing case-insensitive comparison of dNSName and rfc822Name domain labels in X.509 nameConstraints processing

• CVE-2026-3833: fix nameConstraints dNSName/rfc822Name case-sensitive memcmp bypass

• SECURITY UPDATE: nameConstraints case-sensitive comparison bypass
  • debian/patches/CVE-2026-3833.patch: perform case-insensitive comparison of dNSName and rfc822Name domain labels in X.509 nameConstraints processing, fixing excludedSubtrees / permittedSubtrees bypass via letter-casing in the SAN.
  • CVE-2026-3833

• SECURITY UPDATE: nameConstraints case-sensitive comparison bypass
  • debian/patches/CVE-2026-3833.patch: perform case-insensitive comparison of dNSName and rfc822Name domain labels in X.509 nameConstraints processing, fixing excludedSubtrees / permittedSubtrees bypass via letter-casing in the SAN.
  • CVE-2026-3833

• CVE-2026-3833: fix case-sensitive DNS name comparison in x509 name constraints processing that allowed case-variant domain names to bypass excluded constraints, by using c_strncasecmp for case-insensitive match

• CVE-2026-3833: fix case-sensitive nameConstraints comparison of DNS names and e-mail domains in lib/x509/name_constraints.c

• Rebased onto the vendor 3.3.29-9.0.3.el7_9 sources
• CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread (TuxCare fix retained)
• CVE-2026-42014 and CVE-2026-42015 are fixed by the vendor in this build
• CVE-2026-42011 is not applicable to this baseline per the vendor assessment
• CVE-2026-33845, CVE-2026-33846, CVE-2026-3833, CVE-2026-42009, CVE-2026-42012 and CVE-2026-42013 are now fixed by the vendor; the TuxCare duplicates are dropped
• CVE-2026-3833 follow-up: the vendor's email_matches() no longer matches a bare-domain rfc822Name against a bare-domain constraint of the same length, which 3.3.29 did; restore that comparison, case-insensitively, and add the assertions to tests/name-constraints.c

• Rebased onto the vendor 3.3.29-9.0.3.el7_9 sources
• CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread (TuxCare fix retained)
• CVE-2026-42014 and CVE-2026-42015 are fixed by the vendor in this build
• CVE-2026-42011 is not applicable to this baseline per the vendor assessment
• CVE-2026-33845, CVE-2026-33846, CVE-2026-3833, CVE-2026-42009, CVE-2026-42012 and CVE-2026-42013 are now fixed by the vendor; the TuxCare duplicates are dropped
• CVE-2026-3833 follow-up: the vendor's email_matches() no longer matches a bare-domain rfc822Name against a bare-domain constraint of the same length, which 3.3.29 did; restore that comparison, case-insensitively, and add the assertions to tests/name-constraints.c

• Rebased onto the vendor 3.3.29-9.0.3.el7_9 sources
• CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread (TuxCare fix retained)
• CVE-2026-42014 and CVE-2026-42015 are fixed by the vendor in this build
• CVE-2026-42011 is not applicable to this baseline per the vendor assessment
• CVE-2026-33845, CVE-2026-33846, CVE-2026-3833, CVE-2026-42009, CVE-2026-42012 and CVE-2026-42013 are now fixed by the vendor; the TuxCare duplicates are dropped
• CVE-2026-3833 follow-up: the vendor's email_matches() no longer matches a bare-domain rfc822Name against a bare-domain constraint of the same length, which 3.3.29 did; restore that comparison, case-insensitively, and add the assertions to tests/name-constraints.c

These are all security issues fixed in the gnutls-3.8.13-1.1 package on the GA media of openSUSE Tumbleweed.

This update for gnutls fixes the following issues

• CVE-2026-3832: cert-session: fix multi-entry OCSP revocation bypass (bsc#1263706).
• CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).
• CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).
• CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).
• CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).
• CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).
• CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).
• CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).
• CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).
• CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).
• CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).
• CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).
• CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).

Root has patched CVE-2026-3833 in the rootio-gnutls28 package for Root:Debian:13. Multiple fixed versions available.

This update for gnutls fixes the following issues

• CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).
• CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).
• CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).
• CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).
• CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).
• CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).
• CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).
• CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).
• CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).
• CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).
• CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).

This update for gnutls fixes the following issues

• CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).
• CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).
• CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).
• CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).
• CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).
• CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).
• CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).
• CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).
• CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).
• CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).
• CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).
• CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).

This update for gnutls fixes the following issues

• CVE-2026-3832: cert-session: fix multi-entry OCSP revocation bypass (bsc#1263706).
• CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).
• CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).
• CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).
• CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).
• CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).
• CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).
• CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).
• CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).
• CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).
• CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).
• CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).
• CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).

This update for gnutls fixes the following issues

• CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).
• CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).
• CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).
• CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).
• CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).
• CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).
• CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).
• CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).
• CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).
• CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).
• CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).
• CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).

This update for gnutls fixes the following issues

• CVE-2026-3832: cert-session: fix multi-entry OCSP revocation bypass (bsc#1263706).
• CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).
• CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).
• CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).
• CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).
• CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).
• CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).
• CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).
• CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).
• CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).
• CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).
• CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).
• CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).

This update for gnutls fixes the following issues

• CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).
• CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).
• CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).
• CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).
• CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).
• CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).
• CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).
• CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).
• CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).
• CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).
• CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).
• CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).