{"id":"CVE-2026-33845","aliases":["ALPINE-CVE-2026-33845","ALSA-2026:20611","ALSA-2026:20612","ALSA-2026:20613","AZL-85983","BELL-CVE-2026-33845","CLSA-2026-1778172299","CLSA-2026-1778238329","CLSA-2026-1778238907","CLSA-2026-1778239503","CLSA-2026-1778240890","CLSA-2026-1778762233","CLSA-2026-1778774223","CLSA-2026-1779203444","CLSA-2026-1790280771","CLSA-2026-1790677972","CLSA-2026-1790678814","DEBIAN-CVE-2026-33845","EUVD-2026-26392","GHSA-cmj5-x3xf-69wq","OESA-2026-2221","RHSA-2026:13274","RHSA-2026:20611","RHSA-2026:20612","RHSA-2026:20613","RHSA-2026:26409","RHSA-2026:30004","RHSA-2026:30849","RHSA-2026:30850","RHSA-2026:32962","RHSA-2026:33125","RHSA-2026:34372","RHSA-2026:41921","RLSA-2026:20611","RLSA-2026:20612","RLSA-2026:20613","ROOT-OS-DEBIAN-12-CVE-2026-33845","ROOT-OS-DEBIAN-13-CVE-2026-33845","SUSE-SU-2026:2087-1","SUSE-SU-2026:2115-1","SUSE-SU-2026:21752-1","SUSE-SU-2026:21784-1","SUSE-SU-2026:21815-1","SUSE-SU-2026:21867-1","SUSE-SU-2026:2366-1","SUSE-SU-2026:2367-1","SUSE-SU-2026:2822-1","UBUNTU-CVE-2026-33845","USN-8284-1","USN-8502-1","openSUSE-SU-2026:10691-1","openSUSE-SU-2026:20778-1"],"status":"published","title":"Gnutls: gnutls: denial of service via dtls zero-length fragment","description":"A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.02073,"percentile":0.81735,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-191"],"published":"2026-04-30T17:41:34Z","modified":"2026-11-05T21:15:33Z","fixes":[{"ecosystem":"Alpine:v3.20","package":"gnutls","fixed_in":["3.8.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"gnutls","fixed_in":["3.8.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"gnutls","fixed_in":["3.8.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"gnutls","fixed_in":["3.8.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"gnutls","fixed_in":["3.8.13-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"gnutls","fixed_in":["3.8.3-11"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"gnutls","fixed_in":["3.8.13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"gnutls","fixed_in":["3.8.13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"gnutls","fixed_in":["3.8.13-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gnutls","fixed_in":["3.6.16-4.el8.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-c++","fixed_in":["3.6.16-4.el8.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-dane","fixed_in":["3.6.16-4.el8.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-devel","fixed_in":["3.6.16-4.el8.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-utils","fixed_in":["3.6.16-4.el8.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"gnutls","fixed_in":["3.3.29-9.el7_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-c++","fixed_in":["3.3.29-9.el7_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-dane","fixed_in":["3.3.29-9.el7_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-devel","fixed_in":["3.3.29-9.el7_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-utils","fixed_in":["3.3.29-9.el7_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"gnutls","fixed_in":["3.6.16-8.el8.1.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"gnutls-c++","fixed_in":["3.6.16-8.el8.1.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"gnutls-dane","fixed_in":["3.6.16-8.el8.1.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"gnutls-devel","fixed_in":["3.6.16-8.el8.1.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"gnutls-utils","fixed_in":["3.6.16-8.el8.1.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"gnutls","fixed_in":["3.3.29-9.el7_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"gnutls-c++","fixed_in":["3.3.29-9.el7_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"gnutls-dane","fixed_in":["3.3.29-9.el7_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"gnutls-devel","fixed_in":["3.3.29-9.el7_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"gnutls-utils","fixed_in":["3.3.29-9.el7_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"gnutls","fixed_in":["3.3.29-9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"gnutls-c++","fixed_in":["3.3.29-9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"gnutls-dane","fixed_in":["3.3.29-9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"gnutls-devel","fixed_in":["3.3.29-9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"gnutls-utils","fixed_in":["3.3.29-9.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls","fixed_in":["3.7.6-23.el9_2.tuxcare.4.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-c++","fixed_in":["3.7.6-23.el9_2.tuxcare.4.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-dane","fixed_in":["3.7.6-23.el9_2.tuxcare.4.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-devel","fixed_in":["3.7.6-23.el9_2.tuxcare.4.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-utils","fixed_in":["3.7.6-23.el9_2.tuxcare.4.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gnutls","fixed_in":["3.6.16-4.el8.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-c++","fixed_in":["3.6.16-4.el8.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-dane","fixed_in":["3.6.16-4.el8.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-devel","fixed_in":["3.6.16-4.el8.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-utils","fixed_in":["3.6.16-4.el8.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnutls","fixed_in":["3.8.3-9.el9_6.tuxcare.1.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnutls-c++","fixed_in":["3.8.3-9.el9_6.tuxcare.1.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnutls-dane","fixed_in":["3.8.3-9.el9_6.tuxcare.1.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnutls-devel","fixed_in":["3.8.3-9.el9_6.tuxcare.1.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnutls-utils","fixed_in":["3.8.3-9.el9_6.tuxcare.1.els3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"gnutls28","fixed_in":["3.7.9-2+deb12u7"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gnutls28","fixed_in":["3.8.9-3+deb13u4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gnutls28","fixed_in":["3.8.13-1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"gnutls","fixed_in":["3.8.2-12.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"gnutls","fixed_in":["3.6.14-20.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"gnutls","fixed_in":["3.7.2-21.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"gnutls","fixed_in":["3.8.2-12.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"gnutls","fixed_in":["3.8.2-12.oe2403sp1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnutls28","fixed_in":["3.6.13-2ubuntu1.12+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"gnutls28","fixed_in":["3.7.3-4ubuntu1.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"gnutls28","fixed_in":["3.7.3-4ubuntu1.9+Fips1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"gnutls28","fixed_in":["3.8.3-1.1ubuntu3.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"gnutls28","fixed_in":["3.8.3-1.1ubuntu3.6+Fips1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"gnutls28","fixed_in":["3.8.9-3ubuntu2.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"gnutls28","fixed_in":["3.8.12-2ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.20","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.13-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gnutls-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Azure Linux:3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-11"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.7.8-r2"},{"fixed":"3.8.13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.8.8-r0"},{"fixed":"3.8.13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.8.0-r3"},{"fixed":"3.8.13-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8.1.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8.1.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8.1.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8.1.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8.1.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.4.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.4.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.4.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.4.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.4.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-9.el9_6.tuxcare.1.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-9.el9_6.tuxcare.1.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-9.el9_6.tuxcare.1.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-9.el9_6.tuxcare.1.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-9.el9_6.tuxcare.1.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_6.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_6.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_6.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_6.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_6.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"Debian:12","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.9-2+deb12u7"}]}],"versions":["3.7.9-2","3.7.9-2+deb12u1","3.7.9-2+deb12u2","3.7.9-2+deb12u3","3.7.9-2+deb12u4","3.7.9-2+deb12u5","3.7.9-2+deb12u6"]},{"source":"osv","ecosystem":"Debian:13","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.9-3+deb13u4"}]}],"versions":["3.8.9-3","3.8.9-3+deb13u1","3.8.9-3+deb13u2","3.8.9-3+deb13u3"]},{"source":"osv","ecosystem":"Debian:14","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.13-1"}]}],"versions":["3.8.10-1","3.8.10-2","3.8.10-3","3.8.11-1","3.8.11-2","3.8.11-3","3.8.12-1","3.8.12-2","3.8.12-3","3.8.12-4","3.8.9-3"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.2-12.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.14-20.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-21.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.2-12.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.2-12.oe2403sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.13-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.13-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.13-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.13-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gnutls-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.13-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.13-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mingw32-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.13-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mingw64-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.13-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-9.el7_9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-9.el7_9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-9.el7_9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-9.el7_9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-9.el7_9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Rocky Linux:9","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Rocky Linux:10","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.17-8.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.17-8.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.27-3.18.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.27-3.18.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.24.2"}]}],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+esm2"}]}],"versions":["3.6.9-5ubuntu1","3.6.9-5ubuntu2","3.6.10-5","3.6.11.1-2","3.6.11.1-2ubuntu2","3.6.13-2ubuntu1","3.6.13-2ubuntu1.1","3.6.13-2ubuntu1.2","3.6.13-2ubuntu1.3","3.6.13-2ubuntu1.6","3.6.13-2ubuntu1.7","3.6.13-2ubuntu1.8","3.6.13-2ubuntu1.9","3.6.13-2ubuntu1.10","3.6.13-2ubuntu1.11","3.6.13-2ubuntu1.12","3.6.13-2ubuntu1.12+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-4ubuntu1.9"}]}],"versions":["3.7.1-5ubuntu1","3.7.2-2ubuntu1","3.7.2-4ubuntu1","3.7.2-5ubuntu1","3.7.3-4ubuntu1","3.7.3-4ubuntu1.1","3.7.3-4ubuntu1.2","3.7.3-4ubuntu1.3","3.7.3-4ubuntu1.4","3.7.3-4ubuntu1.5","3.7.3-4ubuntu1.6","3.7.3-4ubuntu1.7","3.7.3-4ubuntu1.8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.7.3-4ubuntu1.2+Fips1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-4ubuntu1.9+Fips1"}]}],"versions":["3.7.3-4ubuntu1.2+Fips1.1","3.7.3-4ubuntu1.3+Fips1.1","3.7.3-4ubuntu1.4+Fips1","3.7.3-4ubuntu1.5+Fips1","3.7.3-4ubuntu1.6+Fips1","3.7.3-4ubuntu1.7+Fips1","3.7.3-4ubuntu1.7+Fips1.1","3.7.3-4ubuntu1.8+Fips1.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-1.1ubuntu3.6"}]}],"versions":["3.8.1-4ubuntu1","3.8.1-4ubuntu6","3.8.1-4ubuntu7","3.8.3-1ubuntu1","3.8.3-1.1ubuntu2","3.8.3-1.1ubuntu3","3.8.3-1.1ubuntu3.1","3.8.3-1.1ubuntu3.2","3.8.3-1.1ubuntu3.3","3.8.3-1.1ubuntu3.4","3.8.3-1.1ubuntu3.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-1.1ubuntu3.6+Fips1.2"}]}],"versions":["3.8.3-1.1ubuntu3.1+Fips1","3.8.3-1.1ubuntu3.4+Fips1","3.8.3-1.1ubuntu3.4+Fips1.1","3.8.3-1.1ubuntu3.5+Fips1.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.9-3ubuntu2.2"}]}],"versions":["3.8.9-2ubuntu3","3.8.9-3ubuntu1","3.8.9-3ubuntu2","3.8.9-3ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.12-2ubuntu1.1"}]}],"versions":["3.8.9-3ubuntu2","3.8.10-3ubuntu1","3.8.12-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-4ubuntu1.9"}]}],"versions":["3.7.1-5ubuntu1","3.7.2-2ubuntu1","3.7.2-4ubuntu1","3.7.2-5ubuntu1","3.7.3-4ubuntu1","3.7.3-4ubuntu1.1","3.7.3-4ubuntu1.2","3.7.3-4ubuntu1.3","3.7.3-4ubuntu1.4","3.7.3-4ubuntu1.5","3.7.3-4ubuntu1.6","3.7.3-4ubuntu1.7","3.7.3-4ubuntu1.8"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-1.1ubuntu3.6"}]}],"versions":["3.8.1-4ubuntu1","3.8.1-4ubuntu6","3.8.1-4ubuntu7","3.8.3-1ubuntu1","3.8.3-1.1ubuntu2","3.8.3-1.1ubuntu3","3.8.3-1.1ubuntu3.1","3.8.3-1.1ubuntu3.2","3.8.3-1.1ubuntu3.3","3.8.3-1.1ubuntu3.4","3.8.3-1.1ubuntu3.5"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.9-3ubuntu2.2"}]}],"versions":["3.8.9-2ubuntu3","3.8.9-3ubuntu1","3.8.9-3ubuntu2","3.8.9-3ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.12-2ubuntu1.1"}]}],"versions":["3.8.9-3ubuntu2","3.8.10-3ubuntu1","3.8.12-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.9+esm3"}]}],"versions":["3.3.15-5ubuntu2","3.3.18-1ubuntu1","3.3.20-1ubuntu1","3.4.9-2ubuntu1","3.4.10-4ubuntu1","3.4.10-4ubuntu1.1","3.4.10-4ubuntu1.2","3.4.10-4ubuntu1.3","3.4.10-4ubuntu1.4","3.4.10-4ubuntu1.5","3.4.10-4ubuntu1.6","3.4.10-4ubuntu1.7","3.4.10-4ubuntu1.8","3.4.10-4ubuntu1.9","3.4.10-4ubuntu1.9+esm1","3.4.10-4ubuntu1.9+esm2"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+esm3"}]}],"versions":["3.5.8-6ubuntu3","3.5.17-1ubuntu1","3.5.17-1ubuntu3","3.5.18-1ubuntu1","3.5.18-1ubuntu1.1","3.5.18-1ubuntu1.2","3.5.18-1ubuntu1.3","3.5.18-1ubuntu1.4","3.5.18-1ubuntu1.5","3.5.18-1ubuntu1.6","3.5.18-1ubuntu1.6+esm1","3.5.18-1ubuntu1.6+esm2"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+esm2"}]}],"versions":["3.6.9-5ubuntu1","3.6.9-5ubuntu2","3.6.10-5","3.6.11.1-2","3.6.11.1-2ubuntu2","3.6.13-2ubuntu1","3.6.13-2ubuntu1.1","3.6.13-2ubuntu1.2","3.6.13-2ubuntu1.3","3.6.13-2ubuntu1.6","3.6.13-2ubuntu1.7","3.6.13-2ubuntu1.8","3.6.13-2ubuntu1.9","3.6.13-2ubuntu1.10","3.6.13-2ubuntu1.11","3.6.13-2ubuntu1.12","3.6.13-2ubuntu1.12+esm1"],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.13-1.1"}]}],"bundled":13}],"products":[{"vendor":"gnu","product":"gnutls"},{"vendor":"red hat","product":"cert manager support for red hat openshift release 1.17"},{"vendor":"red hat","product":"cert manager support for red hat openshift release 1.18"},{"vendor":"red hat","product":"cert manager support for red hat openshift release 1.20"},{"vendor":"red hat","product":"red hat ai inference server 3.2"},{"vendor":"red hat","product":"red hat discovery 2"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat openshift ai 3.4"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"red hat","product":"red hat openshift container platform 4.12"},{"vendor":"red hat","product":"red hat openshift container platform 4.13"},{"vendor":"red hat","product":"red hat openshift container platform 4.14"},{"vendor":"red hat","product":"red hat openshift container platform 4.15"},{"vendor":"red hat","product":"red hat openshift container platform 4.16"},{"vendor":"red hat","product":"red hat openshift container platform 4.17"},{"vendor":"red hat","product":"red hat openshift container platform 4.18"},{"vendor":"red hat","product":"red hat openshift container platform 4.19"},{"vendor":"red hat","product":"red hat update infrastructure 5"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"openshift_container_platform"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:13274","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:20611","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:20612","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:20613","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26319","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26409","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:29197","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:30004","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:30849","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:30850","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:32962","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:33125","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:34372","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36004","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36005","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36006","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:41921","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:56786","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:56853","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:56911","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57402","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57483","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:58981","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:59831","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60019","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:65839","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:72502","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:74674","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82304","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82322","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82347","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82354","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82372","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82857","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82888","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33845","tags":["vdb-entry","x_refsource_REDHAT","Vendor Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2450624","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Vendor Advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33845.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33845","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-cmj5-x3xf-69wq"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-33845","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33846","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3833","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42009","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42010","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42011","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42012","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42013","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42014","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42015","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-5260","tags":["report"]},{"url":"https://bugzilla.redhat.com/2445763","tags":["report"]},{"url":"https://bugzilla.redhat.com/2450624","tags":["report"]},{"url":"https://bugzilla.redhat.com/2450625","tags":["report"]},{"url":"https://bugzilla.redhat.com/2467279","tags":["report"]},{"url":"https://bugzilla.redhat.com/2467289","tags":["report"]},{"url":"https://bugzilla.redhat.com/2467437","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-20611.html","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3832","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-5419","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-20612.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-20613.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-33845","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1778172299.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1778238329.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1778238907.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1778239503.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1778240890.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778762233.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1778774223.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1779203444.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1790280771.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1790677972.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1790678814.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33845.json","tags":["advisory"]},{"url":"https://gitlab.com/gnutls/gnutls","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-33845","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2221","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13274.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445762","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3832","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3832","tags":["advisory"]},{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1801","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445763","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3833","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3833","tags":["advisory"]},{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1803","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467450","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-5260","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5260","tags":["advisory"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-10","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467686","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-5419","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5419","tags":["advisory"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-13","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33845","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2450625","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33846","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33846","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467279","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42009","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42009","tags":["advisory"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-2","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467289","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42010","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42010","tags":["advisory"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-4","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467437","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42011","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42011","tags":["advisory"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-6","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467441","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42012","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42012","tags":["advisory"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-7","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467448","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42013","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42013","tags":["advisory"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-8","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467451","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42014","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42014","tags":["advisory"]},{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1766","tags":["article"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-9","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467678","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42015","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42015","tags":["advisory"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-11","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20611.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20612.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20613.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26409.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_30004.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2423177","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_30849.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-12133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-12133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12133","tags":["advisory"]},{"url":"https://gitlab.com/gnutls/libtasn1/-/blob/master/doc/security/CVE-2024-12133.md","tags":["article"]},{"url":"https://gitlab.com/gnutls/libtasn1/-/issues/52","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-14831","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-14831","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14831","tags":["advisory"]},{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1773","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_30850.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_32962.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33125.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34372.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41921.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:20611","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:20612","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:20613","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262087-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1263704","tags":["report"]},{"url":"https://bugzilla.suse.com/1263705","tags":["report"]},{"url":"https://bugzilla.suse.com/1263707","tags":["report"]},{"url":"https://bugzilla.suse.com/1263708","tags":["report"]},{"url":"https://bugzilla.suse.com/1263709","tags":["report"]},{"url":"https://bugzilla.suse.com/1263710","tags":["report"]},{"url":"https://bugzilla.suse.com/1263711","tags":["report"]},{"url":"https://bugzilla.suse.com/1263712","tags":["report"]},{"url":"https://bugzilla.suse.com/1263713","tags":["report"]},{"url":"https://bugzilla.suse.com/1263714","tags":["report"]},{"url":"https://bugzilla.suse.com/1263715","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5260","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262115-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1263716","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5419","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621752-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1263706","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3832","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621784-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621815-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621867-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262366-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262367-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9820","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262822-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1257960","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14831","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-33845","tags":["report"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-3","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8284-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8502-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-3832","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-3833","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-5260","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-5419","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-33846","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-0553","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-12243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-9820","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-14831","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-33845","title":"Gnutls: gnutls: denial of service via dtls zero-length fragment","description":"A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.","status":"published","published":"2026-04-30T17:41:34.076Z","modified":"2026-11-04T22:24:36.916Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-191","CWE-191"],"updated_at":"2026-11-04T23:40:09.798467Z"}],"euvd":[{"id":"EUVD-2026-26392","description":"A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.","status":"published","published":"2026-04-30T17:41:34Z","modified":"2026-11-04T22:24:36Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-04T23:47:18.620008Z"}],"ghsa":[{"id":"GHSA-cmj5-x3xf-69wq","title":"A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero...","description":"A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.","status":"published","published":"2026-04-30T18:30:32Z","modified":"2026-10-14T21:32:24Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T15:13:28.606179Z"}],"nvd":[{"id":"CVE-2026-33845","description":"A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.","status":"published","published":"2026-04-30T18:16:28.003Z","modified":"2026-11-04T23:17:27.143Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-191"],"updated_at":"2026-11-05T01:45:09.431178Z"}],"osv":[{"id":"ALPINE-CVE-2026-33845","description":"A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.","status":"published","published":"2026-04-30T18:16:28.003Z","modified":"2026-10-01T02:17:49.249685545Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"BELL-CVE-2026-33845","status":"published","published":"2026-05-01T06:09:38.347749Z","modified":"2026-05-12T07:15:12.052958Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:23.572955Z"},{"id":"CVE-2026-33845","title":"Gnutls: gnutls: denial of service via dtls zero-length fragment","description":"A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.","status":"published","published":"2026-04-30T17:41:34.076Z","modified":"2026-11-05T21:15:33.934071234Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-191"],"updated_at":"2026-11-05T22:01:21.792402Z"},{"id":"DEBIAN-CVE-2026-33845","description":"A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.","status":"published","published":"2026-04-30T18:16:28.003Z","modified":"2026-11-05T09:47:39.452921497Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-05T13:31:24.64316Z"},{"id":"OESA-2026-2221","title":"gnutls security update","description":"GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, and other required structures. The project strives to provide a secure communications back-end, simple to use and integrated with the rest of the base Linux libraries. A back-end designed to work and be secure out of the box, keeping the complexity of TLS and PKI out of application code.\r\n\r\nSecurity Fix(es):\n\nA flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.(CVE-2026-33845)","status":"published","published":"2026-05-09T11:11:12Z","modified":"2026-08-18T01:19:51.829626353Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"RHSA-2026:13274","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-05-04T10:09:53Z","modified":"2026-10-16T10:10:47Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:20611","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2026-05-27T10:07:21Z","modified":"2026-10-16T10:13:04Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:20612","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2026-06-03T10:19:34Z","modified":"2026-10-16T10:13:04Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:20613","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2026-06-02T10:08:05Z","modified":"2026-10-16T10:13:05Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:26409","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2026-06-17T10:08:48Z","modified":"2026-10-16T10:14:15Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:30004","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2026-06-26T11:46:40Z","modified":"2026-10-16T10:15:27Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:30849","title":"Red Hat Security Advisory: gnutls and libtasn1 security update","status":"published","published":"2026-06-29T11:29:41Z","modified":"2026-10-16T10:15:32Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:30850","title":"Red Hat Security Advisory: gnutls and libtasn1 security update","status":"published","published":"2026-06-29T11:29:42Z","modified":"2026-10-16T10:15:33Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:32962","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2026-06-30T10:49:21Z","modified":"2026-10-16T10:15:42Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:33125","title":"Red Hat Security Advisory: gnutls and libtasn1 security update","status":"published","published":"2026-06-30T10:49:29Z","modified":"2026-10-16T10:15:45Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:34372","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2026-07-02T10:17:44Z","modified":"2026-10-15T10:17:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:41921","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2026-07-23T10:13:46Z","modified":"2026-10-16T10:17:43Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RLSA-2026:20611","title":"Important: gnutls security update","description":"Please update the gnutls packages to provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.\n\nSecurity Fix(es):\n* gnutls: Add more checks to DTLS reassembly (CVE-2026-33846)\n* gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)\n* gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845)\n* gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)\n* gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833)\n* gnutls: Fix intersecting empty constraints (CVE-2026-42011)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-29T00:00:17.757413Z","modified":"2026-05-29T00:30:04.786970928Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:20612","title":"Important: gnutls security update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library,\nwhich implements cryptographic algorithms and protocols such as SSL, TLS, and\nDTLS.\n\nSecurity Fix(es):\n\n* gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)\n* gnutls: Fix crashing on an underflow with a DTLS datagram\n(CVE-2026-33845)\n* gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)\n* gnutls: Fix case-sensitivity of domain name comparison in name\nconstraints (CVE-2026-3833)\n* gnutls: Fix intersecting empty name constraints (CVE-2026-42011)\n* gnutls: Denial of Service via heap buffer overflow in DTLS handshake\nfragment reassembly (CVE-2026-33846)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.","status":"published","published":"2026-06-02T18:03:08.506628Z","modified":"2026-06-02T18:25:39.713855542Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:20613","title":"Important: gnutls security update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library,\nwhich implements cryptographic algorithms and protocols such as SSL, TLS, and\nDTLS.\n\nSecurity Fix(es):\n\n* gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)\n* gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845)\n* gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)\n* gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833)\n* gnutls: Fix intersecting empty name constraints (CVE-2026-42011)\n* gnutls: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly (CVE-2026-33846)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.","status":"published","published":"2026-06-05T12:04:50.053452Z","modified":"2026-06-05T12:30:04.571139482Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-33845","title":"CVE-2026-33845 in rootio-gnutls28 - Patched by Root","description":"Root has patched CVE-2026-33845 in the rootio-gnutls28 package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2026-05-04T06:45:52Z","modified":"2026-05-11T14:00:29.752937Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:32.037361Z"},{"id":"UBUNTU-CVE-2026-33845","description":"A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.","status":"published","published":"2026-04-30T18:16:00Z","modified":"2026-07-06T20:44:27.233455167Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T16:56:16.036833Z"},{"id":"ALSA-2026:20611","title":"Important: gnutls security update","description":"Please update the gnutls packages to provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.  \n\nSecurity Fix(es):  \n\n  * gnutls: Add more checks to DTLS reassembly (CVE-2026-33846)\n  * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)\n  * gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845)\n  * gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)\n  * gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833)\n  * gnutls: Fix intersecting empty constraints (CVE-2026-42011)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-26T00:00:00Z","modified":"2026-10-29T11:12:11.752999085Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:20612","title":"Important: gnutls security update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library,  \nwhich implements cryptographic algorithms and protocols such as SSL, TLS, and  \nDTLS.  \n\nSecurity Fix(es):  \n\n  * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)\n  * gnutls: Fix crashing on an underflow with a DTLS datagram\n\n\n(CVE-2026-33845)  \n\n  * gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)\n  * gnutls: Fix case-sensitivity of domain name comparison in name\n\n\nconstraints (CVE-2026-3833)  \n\n  * gnutls: Fix intersecting empty name constraints (CVE-2026-42011)\n  * gnutls: Denial of Service via heap buffer overflow in DTLS handshake\n\n\nfragment reassembly (CVE-2026-33846)  \n\nFor more details about the security issue(s), including the impact, a CVSS  \nscore, acknowledgments, and other related information, refer to the CVE page(s)  \nlisted in the References section.\n","status":"published","published":"2026-05-26T00:00:00Z","modified":"2026-10-29T11:42:21.413259386Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:20613","title":"Important: gnutls security update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library,  \nwhich implements cryptographic algorithms and protocols such as SSL, TLS, and  \nDTLS.  \n\nSecurity Fix(es):  \n\n  * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)\n  * gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845)\n  * gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)\n  * gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833)\n  * gnutls: Fix intersecting empty name constraints (CVE-2026-42011)\n  * gnutls: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly (CVE-2026-33846)\n\n\nFor more details about the security issue(s), including the impact, a CVSS  \nscore, acknowledgments, and other related information, refer to the CVE page(s)  \nlisted in the References section.\n","status":"published","published":"2026-05-26T00:00:00Z","modified":"2026-10-29T11:42:23.859257804Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"AZL-85983","title":"CVE-2026-33845 affecting package gnutls for versions less than 3.8.3-11","description":"A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.","status":"published","published":"2026-04-30T18:16:28Z","modified":"2026-08-28T17:56:55.274473Z","updated_at":"2026-11-02T15:28:10.677811Z"},{"id":"CLSA-2026-1778172299","title":"gnutls: Fix of CVE-2026-33845","description":"- CVE-2026-33845: fix DTLS handshake fragment reassembly integer underflow and\n  heap overrun by tracking frag_length instead of end_offset","status":"published","published":"2026-05-07T16:45:06Z","modified":"2026-06-01T00:33:23.802288233Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778238329","title":"gnutls: Fix of CVE-2026-33845","description":"- CVE-2026-33845: fix DTLS handshake parsing integer underflow leading to OOB read","status":"published","published":"2026-05-08T11:15:00Z","modified":"2026-06-01T00:33:27.215852592Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778238907","title":"gnutls: Fix of CVE-2026-33845","description":"- CVE-2026-33845: fix DTLS handshake fragment reassembly integer underflow and\n  heap overrun by tracking frag_length instead of end_offset","status":"published","published":"2026-05-08T11:18:09Z","modified":"2026-06-01T00:33:14.655972039Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778239503","title":"gnutls: Fix of CVE-2026-33845","description":"- CVE-2026-33845: fix DTLS handshake parsing integer underflow leading to OOB read","status":"published","published":"2026-05-08T11:25:09Z","modified":"2026-06-01T00:33:28.269775547Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778240890","title":"gnutls: Fix of CVE-2026-33845","description":"- CVE-2026-33845: fix DTLS handshake parsing integer underflow leading to OOB read","status":"published","published":"2026-05-08T11:48:15Z","modified":"2026-06-01T00:33:18.931715125Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778762233","title":"gnutls: Fix of CVE-2026-33845","description":"- CVE-2026-33845: fix integer underflow in DTLS handshake reassembly that\n  allowed a remote heap overrun via crafted zero-length fragments","status":"published","published":"2026-05-14T15:13:14Z","modified":"2026-06-01T00:32:30.891055562Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778774223","title":"gnutls: Fix of CVE-2026-33845","description":"- CVE-2026-33845: fix DTLS handshake fragment reassembly integer underflow and\n  heap overrun by tracking frag_length instead of end_offset","status":"published","published":"2026-05-14T17:22:07Z","modified":"2026-06-01T00:33:13.18465988Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1779203444","title":"gnutls: Fix of CVE-2026-33845","description":"- CVE-2026-33845: fix integer underflow and remote heap overrun in DTLS\n  handshake reassembly by tracking start_offset and frag_length instead\n  of an inclusive [start_offset, end_offset] range","status":"published","published":"2026-05-19T15:10:48Z","modified":"2026-06-01T00:32:53.465323566Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1790280771","title":"gnutls: Fix of 10 CVEs","description":"- Rebased onto the vendor 3.3.29-9.0.3.el7_9 sources\n- CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread (TuxCare fix retained)\n- CVE-2026-42014 and CVE-2026-42015 are fixed by the vendor in this build\n- CVE-2026-42011 is not applicable to this baseline per the vendor assessment\n- CVE-2026-33845, CVE-2026-33846, CVE-2026-3833, CVE-2026-42009, CVE-2026-42012 and CVE-2026-42013 are now fixed by the vendor; the TuxCare duplicates are dropped\n- CVE-2026-3833 follow-up: the vendor's email_matches() no longer matches a\n  bare-domain rfc822Name against a bare-domain constraint of the same length,\n  which 3.3.29 did; restore that comparison, case-insensitively, and add the\n  assertions to tests/name-constraints.c","status":"published","published":"2026-09-24T20:13:00Z","modified":"2026-10-26T09:43:38.509360485Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1790677972","title":"gnutls: Fix of 10 CVEs","description":"- Rebased onto the vendor 3.3.29-9.0.3.el7_9 sources\n- CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread (TuxCare fix retained)\n- CVE-2026-42014 and CVE-2026-42015 are fixed by the vendor in this build\n- CVE-2026-42011 is not applicable to this baseline per the vendor assessment\n- CVE-2026-33845, CVE-2026-33846, CVE-2026-3833, CVE-2026-42009, CVE-2026-42012 and CVE-2026-42013 are now fixed by the vendor; the TuxCare duplicates are dropped\n- CVE-2026-3833 follow-up: the vendor's email_matches() no longer matches a\n  bare-domain rfc822Name against a bare-domain constraint of the same length,\n  which 3.3.29 did; restore that comparison, case-insensitively, and add the\n  assertions to tests/name-constraints.c","status":"published","published":"2026-09-30T16:34:20Z","modified":"2026-10-26T09:43:53.397959753Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790678814","title":"gnutls: Fix of 10 CVEs","description":"- Rebased onto the vendor 3.3.29-9.0.3.el7_9 sources\n- CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread (TuxCare fix retained)\n- CVE-2026-42014 and CVE-2026-42015 are fixed by the vendor in this build\n- CVE-2026-42011 is not applicable to this baseline per the vendor assessment\n- CVE-2026-33845, CVE-2026-33846, CVE-2026-3833, CVE-2026-42009, CVE-2026-42012 and CVE-2026-42013 are now fixed by the vendor; the TuxCare duplicates are dropped\n- CVE-2026-3833 follow-up: the vendor's email_matches() no longer matches a\n  bare-domain rfc822Name against a bare-domain constraint of the same length,\n  which 3.3.29 did; restore that comparison, case-insensitively, and add the\n  assertions to tests/name-constraints.c","status":"published","published":"2026-09-29T10:47:03Z","modified":"2026-10-26T09:43:53.989474697Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"openSUSE-SU-2026:10691-1","title":"gnutls-3.8.13-1.1 on GA media","description":"These are all security issues fixed in the gnutls-3.8.13-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-05T00:00:00Z","modified":"2026-05-06T08:00:51.956627Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:20778-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2026-3832: cert-session: fix multi-entry OCSP revocation bypass (bsc#1263706).\n- CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).\n- CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).\n- CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).\n- CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).\n- CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).\n- CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).\n- CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).\n- CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).\n- CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).\n- CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).\n- CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).\n- CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).\n","status":"published","published":"2026-05-18T10:08:52Z","modified":"2026-05-26T18:24:12.498703192Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-33845","title":"CVE-2026-33845 in rootio-gnutls28 - Patched by Root","description":"Root has patched CVE-2026-33845 in the rootio-gnutls28 package for Root:Debian:13. Multiple fixed versions available.","status":"withdrawn","published":"2026-05-15T12:30:04Z","modified":"2026-05-27T20:00:15.171705Z","updated_at":"2026-11-02T15:53:33.415244Z"},{"id":"SUSE-SU-2026:2087-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).\n- CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).\n- CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).\n- CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).\n- CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).\n- CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).\n- CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).\n- CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).\n- CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).\n- CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).\n- CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).\n","status":"published","published":"2026-05-27T07:57:57Z","modified":"2026-05-28T08:15:05.84449681Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:2115-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).\n- CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).\n- CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).\n- CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).\n- CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).\n- CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).\n- CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).\n- CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).\n- CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).\n- CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).\n- CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).\n- CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).\n","status":"published","published":"2026-05-29T15:27:34Z","modified":"2026-05-30T23:15:06.412281054Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:21752-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2026-3832: cert-session: fix multi-entry OCSP revocation bypass (bsc#1263706).\n- CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).\n- CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).\n- CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).\n- CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).\n- CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).\n- CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).\n- CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).\n- CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).\n- CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).\n- CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).\n- CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).\n- CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).\n","status":"published","published":"2026-05-18T10:06:30Z","modified":"2026-05-27T18:24:07.326198115Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:21784-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).\n- CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).\n- CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).\n- CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).\n- CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).\n- CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).\n- CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).\n- CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).\n- CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).\n- CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).\n- CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).\n- CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).\n","status":"published","published":"2026-05-22T09:27:57Z","modified":"2026-05-28T18:24:07.066129397Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:21815-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2026-3832: cert-session: fix multi-entry OCSP revocation bypass (bsc#1263706).\n- CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).\n- CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).\n- CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).\n- CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).\n- CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).\n- CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).\n- CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).\n- CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).\n- CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).\n- CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).\n- CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).\n- CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).\n","status":"published","published":"2026-05-18T10:06:30Z","modified":"2026-05-28T18:24:12.731393373Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:21867-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).\n- CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).\n- CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).\n- CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).\n- CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).\n- CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).\n- CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).\n- CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).\n- CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).\n- CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).\n- CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).\n- CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).\n","status":"published","published":"2026-05-22T09:56:54Z","modified":"2026-06-03T18:24:20.450375886Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:2366-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).\n- CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).\n- CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).\n","status":"published","published":"2026-06-11T09:12:40Z","modified":"2026-06-12T08:45:05.887930099Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:2367-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).\n- CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).\n- CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).\n","status":"published","published":"2026-06-11T09:12:50Z","modified":"2026-06-12T08:45:05.853886157Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:2822-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a\n  large number of name constraints and SANs (bsc#1257960).\n- CVE-2026-3833: incorrectly accepted domain names due to comparison during name constraints processing being\n  case-sensitive (bsc#1263707).\n- CVE-2026-5260: heap overread when processing extremely short premaster secret as part of an RSA key exchange\n  (bsc#1263715).\n- CVE-2026-33845: integer overflow and heap overrun when parsing fragments with zero length and non-zero offset during\n  DTLS handshake (bsc#1263704).\n- CVE-2026-33846: heap overwrite during DTLS handshake fragment reassembly due to missing validations and checks\n  (bsc#1263705).\n- CVE-2026-42009: undefined behavior resulting in a DoS when handling DTLS packets with duplicate sequence numbers\n  (bsc#1263708).\n- CVE-2026-42010: authentication bypass when processing a PSK username with a NUL-character (bsc#1263709).\n- CVE-2026-42011: name constraint bypass leading to acceptance of invalid certificates during certificate validation\n  (bsc#1263710).\n- CVE-2026-42012: spoofing of legitimate services and sensitive information interception via specially crafted\n  certificates containing URIs or SRV SANs. (bsc#1263711).\n- CVE-2026-42013: certificate validation bypass when validating certificates with an oversized SAN (bsc#1263712).\n- CVE-2026-42014: use-after-free when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks\n  a protected authentication path (bsc#1263713).\n- CVE-2026-42015: memory corruption when appending to a PKCS#12 bag that already contains 32 elements (bsc#1263714).\n","status":"published","published":"2026-07-09T18:07:12Z","modified":"2026-07-10T10:00:06.103026362Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"USN-8284-1","title":"gnutls28 vulnerabilities","description":"Joshua Rogers discovered that GnuTLS did not properly handle malformed\nDTLS handshake fragments in certain cases. A remote attacker could\npossibly use this issue to obtain sensitive information, or cause a\ndenial of service. (CVE-2026-33845)\n\nHaruto Kimura, Oscar Reparaz, and Zou Dikai discovered that GnuTLS did\nnot properly validate DTLS handshake fragment lengths in certain cases. A\nremote attacker could possibly use this issue to cause GnuTLS to crash,\nresulting in a denial of service, or execute arbitrary code.\n(CVE-2026-33846)\n\nOleh Konko and Joshua Rogers discovered that GnuTLS did not properly\nvalidate OCSP responses in certain cases. A remote attacker could\npossibly use this issue to bypass certificate revocation checks, leading\nto a machine-in-the-middle attack. (CVE-2026-3832)\n\nOleh Konko and Joshua Rogers discovered that GnuTLS did not properly\nhandle case-insensitive name constraints in certain cases. A remote\nattacker could possibly use this issue to bypass certificate validation,\nleading to a machine-in-the-middle attack. (CVE-2026-3833)\n\nJoshua Rogers discovered that GnuTLS did not properly order DTLS packets\nwith duplicate sequence numbers in certain cases. A remote attacker could\npossibly use this issue to cause GnuTLS to crash, resulting in a denial\nof service. (CVE-2026-42009)\n\nJoshua Rogers discovered that GnuTLS did not properly handle usernames\ncontaining NUL characters in certain RSA-PSK configurations. A remote\nattacker could possibly use this issue to bypass authentication and gain\nunintended access to services. (CVE-2026-42010)\n\nHaruto Kimura discovered that GnuTLS did not properly apply permitted\nname constraints in certain certificate validation paths. A remote\nattacker could possibly use this issue to bypass certificate validation,\nleading to a machine-in-the-middle attack. (CVE-2026-42011)\n\nOleh Konko discovered that GnuTLS incorrectly fell back to Common Name\nchecks for certain URI and SRV subject alternative names. A remote\nattacker could possibly use this issue to bypass certificate validation,\nleading to a machine-in-the-middle attack. (CVE-2026-42012)\n\nHaruto Kimura and Joshua Rogers discovered that GnuTLS incorrectly fell\nback to Common Name checks when subject alternative names were oversized.\nA remote attacker could possibly use this issue to bypass certificate\nvalidation, leading to a machine-in-the-middle attack. (CVE-2026-42013)\n\nLuigino Camastra and Joshua Rogers discovered that GnuTLS had a\nuse-after-free issue when changing PKCS#11 token security officer PINs in\ncertain cases. An attacker could possibly use this issue to cause GnuTLS\nto crash, resulting in a denial of service, or execute arbitrary code.\n(CVE-2026-42014)\n\nZou Dikai discovered that GnuTLS did not properly validate PKCS#12 bag\nsizes in certain cases. An attacker could possibly use this issue to\ncause GnuTLS to crash, resulting in a denial of service, or execute\narbitrary code. (CVE-2026-42015)\n\nJoshua Rogers discovered that GnuTLS did not properly handle very short\npremaster secrets in certain RSA key exchange cases with PKCS#11-backed\nserver keys. A remote attacker could possibly use this issue to obtain\nsensitive information. (CVE-2026-5260)\n\nDoria Tang discovered that GnuTLS did not perform PKCS#7 padding checks\nin constant time in certain cases. A remote attacker could possibly use\nthis issue to obtain sensitive information. This issue only affected\nUbuntu 24.04 LTS, Ubuntu 25.10, and Ubuntu 26.04 LTS. (CVE-2026-5419)","status":"published","published":"2026-05-20T12:57:03Z","modified":"2026-06-17T11:00:54.604676326Z","updated_at":"2026-11-02T16:58:22.951676Z"}]},"sources_more":{"osv":1}}