{"id":"CVE-2026-42011","aliases":["ALPINE-CVE-2026-42011","ALSA-2026:20611","ALSA-2026:20612","ALSA-2026:20613","BELL-CVE-2026-42011","CLSA-2026-1780068674","CLSA-2026-1780069034","CLSA-2026-1780389355","CLSA-2026-1780484200","CLSA-2026-1784268522","CLSA-2026-1784559374","CLSA-2026-1790280771","CLSA-2026-1790677972","CLSA-2026-1790678814","CLSA-2026-1791496727","CLSA-2026-1791497467","CLSA-2026-1791497901","DEBIAN-CVE-2026-42011","EUVD-2026-28386","GHSA-568w-37qx-3qc6","RHSA-2026:13274","RHSA-2026:20611","RHSA-2026:20612","RHSA-2026:20613","RHSA-2026:26409","RHSA-2026:30004","RHSA-2026:30849","RHSA-2026:30850","RHSA-2026:32962","RHSA-2026:33125","RHSA-2026:41921","RHSA-2026:43575","RLSA-2026:20611","RLSA-2026:20612","RLSA-2026:20613","ROOT-OS-DEBIAN-13-CVE-2026-42011","SUSE-SU-2026:2087-1","SUSE-SU-2026:2115-1","SUSE-SU-2026:21752-1","SUSE-SU-2026:21784-1","SUSE-SU-2026:21815-1","SUSE-SU-2026:21867-1","SUSE-SU-2026:2822-1","SUSE-SU-2026:2923-1","SUSE-SU-2026:2924-1","UBUNTU-CVE-2026-42011","USN-8539-1","openSUSE-SU-2026:10691-1","openSUSE-SU-2026:20778-1"],"status":"published","title":"Gnutls: gnutls: security bypass due to incorrect name constraint handling","description":"A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.","severity":{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00475,"percentile":0.41339,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-295"],"published":"2026-05-03T06:12:22.51139Z","modified":"2026-11-09T18:31:42Z","fixes":[{"ecosystem":"Alpine:v3.20","package":"gnutls","fixed_in":["3.8.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"gnutls","fixed_in":["3.8.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"gnutls","fixed_in":["3.8.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"gnutls","fixed_in":["3.8.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"gnutls","fixed_in":["3.8.13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"gnutls","fixed_in":["3.8.13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"gnutls","fixed_in":["3.8.13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"gnutls","fixed_in":["3.8.13-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"gnutls","fixed_in":["3.3.29-9.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"gnutls-c++","fixed_in":["3.3.29-9.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"gnutls-dane","fixed_in":["3.3.29-9.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"gnutls-devel","fixed_in":["3.3.29-9.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"gnutls-utils","fixed_in":["3.3.29-9.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"gnutls","fixed_in":["3.3.29-9.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-c++","fixed_in":["3.3.29-9.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-dane","fixed_in":["3.3.29-9.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-devel","fixed_in":["3.3.29-9.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-utils","fixed_in":["3.3.29-9.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"gnutls","fixed_in":["3.3.29-9.0.3.el7_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"gnutls-c++","fixed_in":["3.3.29-9.0.3.el7_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"gnutls-dane","fixed_in":["3.3.29-9.0.3.el7_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"gnutls-devel","fixed_in":["3.3.29-9.0.3.el7_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"gnutls-utils","fixed_in":["3.3.29-9.0.3.el7_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"gnutls28","fixed_in":["3.7.9-2+deb12u7"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gnutls28","fixed_in":["3.8.9-3+deb13u4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gnutls28","fixed_in":["3.8.13-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnutls28","fixed_in":["3.5.18-1ubuntu1.6+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnutls28","fixed_in":["3.6.13-2ubuntu1.12+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"gnutls28","fixed_in":["3.7.3-4ubuntu1.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"gnutls28","fixed_in":["3.7.3-4ubuntu1.9+Fips1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"gnutls28","fixed_in":["3.8.3-1.1ubuntu3.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"gnutls28","fixed_in":["3.8.3-1.1ubuntu3.6+Fips1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"gnutls28","fixed_in":["3.8.9-3ubuntu2.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"gnutls28","fixed_in":["3.8.12-2ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.20","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.13-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gnutls-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Alpaquita:23","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.7.8-r2"},{"fixed":"3.8.13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.8.8-r0"},{"fixed":"3.8.13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.8.0-r3"},{"fixed":"3.8.13-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els12"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els12"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els12"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els12"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els12"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els12"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els12"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els12"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els12"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els12"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8.1.tuxcare.els8"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8.1.tuxcare.els8"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8.1.tuxcare.els8"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8.1.tuxcare.els8"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8.1.tuxcare.els8"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-9.el9_6.tuxcare.1.els6"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-9.el9_6.tuxcare.1.els6"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-9.el9_6.tuxcare.1.els6"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-9.el9_6.tuxcare.1.els6"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-9.el9_6.tuxcare.1.els6"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gnutls-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gnutls-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libgnutls-dane0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libgnutls-openssl27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libgnutls28-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libgnutls30","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libgnutlsxx28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"gnutls-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"gnutls-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"guile-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libgnutls-dane0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libgnutls-openssl27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libgnutls28-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libgnutls30","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libgnutlsxx28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_6.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_6.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_6.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_6.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_6.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.0.3.el7_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.9-2+deb12u7"}]}],"versions":["3.7.9-2","3.7.9-2+deb12u1","3.7.9-2+deb12u2","3.7.9-2+deb12u3","3.7.9-2+deb12u4","3.7.9-2+deb12u5","3.7.9-2+deb12u6"]},{"source":"osv","ecosystem":"Debian:13","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.9-3+deb13u4"}]}],"versions":["3.8.9-3","3.8.9-3+deb13u1","3.8.9-3+deb13u2","3.8.9-3+deb13u3"]},{"source":"osv","ecosystem":"Debian:14","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.13-1"}]}],"versions":["3.8.10-1","3.8.10-2","3.8.10-3","3.8.11-1","3.8.11-2","3.8.11-3","3.8.12-1","3.8.12-2","3.8.12-3","3.8.12-4","3.8.9-3"]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.13-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.13-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.13-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.13-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gnutls-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.13-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.13-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mingw32-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.13-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mingw64-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.13-1.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.9-9.el10_0.19"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-6.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_8.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4.6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-10.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_4.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-9.el7_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-9.el7_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-9.el7_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-9.el7_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-9.el7_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_10.6"}]}],"bundled":11},{"source":"osv","ecosystem":"Rocky Linux:9","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el9_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Rocky Linux:10","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.10-4.el10_2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.24.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.17-8.26.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.27-3.21.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+esm4"}]}],"versions":["3.5.8-6ubuntu3","3.5.17-1ubuntu1","3.5.17-1ubuntu3","3.5.18-1ubuntu1","3.5.18-1ubuntu1.1","3.5.18-1ubuntu1.2","3.5.18-1ubuntu1.3","3.5.18-1ubuntu1.4","3.5.18-1ubuntu1.5","3.5.18-1ubuntu1.6","3.5.18-1ubuntu1.6+esm1","3.5.18-1ubuntu1.6+esm2","3.5.18-1ubuntu1.6+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+esm3"}]}],"versions":["3.6.9-5ubuntu1","3.6.9-5ubuntu2","3.6.10-5","3.6.11.1-2","3.6.11.1-2ubuntu2","3.6.13-2ubuntu1","3.6.13-2ubuntu1.1","3.6.13-2ubuntu1.2","3.6.13-2ubuntu1.3","3.6.13-2ubuntu1.6","3.6.13-2ubuntu1.7","3.6.13-2ubuntu1.8","3.6.13-2ubuntu1.9","3.6.13-2ubuntu1.10","3.6.13-2ubuntu1.11","3.6.13-2ubuntu1.12","3.6.13-2ubuntu1.12+esm1","3.6.13-2ubuntu1.12+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-4ubuntu1.9"}]}],"versions":["3.7.1-5ubuntu1","3.7.2-2ubuntu1","3.7.2-4ubuntu1","3.7.2-5ubuntu1","3.7.3-4ubuntu1","3.7.3-4ubuntu1.1","3.7.3-4ubuntu1.2","3.7.3-4ubuntu1.3","3.7.3-4ubuntu1.4","3.7.3-4ubuntu1.5","3.7.3-4ubuntu1.6","3.7.3-4ubuntu1.7","3.7.3-4ubuntu1.8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.7.3-4ubuntu1.2+Fips1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-4ubuntu1.9+Fips1"}]}],"versions":["3.7.3-4ubuntu1.2+Fips1.1","3.7.3-4ubuntu1.3+Fips1.1","3.7.3-4ubuntu1.4+Fips1","3.7.3-4ubuntu1.5+Fips1","3.7.3-4ubuntu1.6+Fips1","3.7.3-4ubuntu1.7+Fips1","3.7.3-4ubuntu1.7+Fips1.1","3.7.3-4ubuntu1.8+Fips1.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-1.1ubuntu3.6"}]}],"versions":["3.8.1-4ubuntu1","3.8.1-4ubuntu6","3.8.1-4ubuntu7","3.8.3-1ubuntu1","3.8.3-1.1ubuntu2","3.8.3-1.1ubuntu3","3.8.3-1.1ubuntu3.1","3.8.3-1.1ubuntu3.2","3.8.3-1.1ubuntu3.3","3.8.3-1.1ubuntu3.4","3.8.3-1.1ubuntu3.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-1.1ubuntu3.6+Fips1.2"}]}],"versions":["3.8.3-1.1ubuntu3.1+Fips1","3.8.3-1.1ubuntu3.4+Fips1","3.8.3-1.1ubuntu3.4+Fips1.1","3.8.3-1.1ubuntu3.5+Fips1.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.9-3ubuntu2.2"}]}],"versions":["3.8.9-2ubuntu3","3.8.9-3ubuntu1","3.8.9-3ubuntu2","3.8.9-3ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.12-2ubuntu1.1"}]}],"versions":["3.8.9-3ubuntu2","3.8.10-3ubuntu1","3.8.12-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.9+esm4"}]}],"versions":["3.3.15-5ubuntu2","3.3.18-1ubuntu1","3.3.20-1ubuntu1","3.4.9-2ubuntu1","3.4.10-4ubuntu1","3.4.10-4ubuntu1.1","3.4.10-4ubuntu1.2","3.4.10-4ubuntu1.3","3.4.10-4ubuntu1.4","3.4.10-4ubuntu1.5","3.4.10-4ubuntu1.6","3.4.10-4ubuntu1.7","3.4.10-4ubuntu1.8","3.4.10-4ubuntu1.9","3.4.10-4ubuntu1.9+esm1","3.4.10-4ubuntu1.9+esm2","3.4.10-4ubuntu1.9+esm3"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+esm4"}]}],"versions":["3.5.8-6ubuntu3","3.5.17-1ubuntu1","3.5.17-1ubuntu3","3.5.18-1ubuntu1","3.5.18-1ubuntu1.1","3.5.18-1ubuntu1.2","3.5.18-1ubuntu1.3","3.5.18-1ubuntu1.4","3.5.18-1ubuntu1.5","3.5.18-1ubuntu1.6","3.5.18-1ubuntu1.6+esm1","3.5.18-1ubuntu1.6+esm2","3.5.18-1ubuntu1.6+esm3"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+esm3"}]}],"versions":["3.6.9-5ubuntu1","3.6.9-5ubuntu2","3.6.10-5","3.6.11.1-2","3.6.11.1-2ubuntu2","3.6.13-2ubuntu1","3.6.13-2ubuntu1.1","3.6.13-2ubuntu1.2","3.6.13-2ubuntu1.3","3.6.13-2ubuntu1.6","3.6.13-2ubuntu1.7","3.6.13-2ubuntu1.8","3.6.13-2ubuntu1.9","3.6.13-2ubuntu1.10","3.6.13-2ubuntu1.11","3.6.13-2ubuntu1.12","3.6.13-2ubuntu1.12+esm1","3.6.13-2ubuntu1.12+esm2"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.13-1.1"}]}],"bundled":13}],"products":[{"vendor":"red hat","product":"cert manager support for red hat openshift release 1.17"},{"vendor":"red hat","product":"cert manager support for red hat openshift release 1.18"},{"vendor":"red hat","product":"cert manager support for red hat openshift release 1.20"},{"vendor":"red hat","product":"red hat discovery 2"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat openshift ai 3.4"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"red hat","product":"red hat openshift container platform 4.12"},{"vendor":"red hat","product":"red hat openshift container platform 4.14"},{"vendor":"red hat","product":"red hat openshift container platform 4.16"},{"vendor":"red hat","product":"red hat openshift container platform 4.17"},{"vendor":"red hat","product":"red hat openshift container platform 4.18"},{"vendor":"red hat","product":"red hat openshift container platform 4.19"},{"vendor":"red hat","product":"red hat openshift container platform 4.20"},{"vendor":"red hat","product":"red hat openshift container platform 4.21"},{"vendor":"red hat","product":"red hat openshift container platform 4.22"},{"vendor":"red hat","product":"red hat openshift container platform 5"},{"vendor":"red hat","product":"red hat update infrastructure 5"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:13274","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:20611","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:20612","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:20613","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26319","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26409","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:29197","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:30004","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:30849","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:30850","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:32962","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:33125","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:40762","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:41921","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:43575","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:56853","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57483","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:58981","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:59831","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60019","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:72502","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:74674","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82304","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82322","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82347","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82354","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82372","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82857","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82888","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89197","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89232","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89333","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:95508","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42011","tags":["vdb-entry","x_refsource_REDHAT","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467437","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-6","tags":["web","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42011","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-568w-37qx-3qc6"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-42011","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33845","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33846","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3833","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42009","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42010","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42012","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42013","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42014","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42015","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-5260","tags":["report"]},{"url":"https://bugzilla.redhat.com/2445763","tags":["report"]},{"url":"https://bugzilla.redhat.com/2450624","tags":["report"]},{"url":"https://bugzilla.redhat.com/2450625","tags":["report"]},{"url":"https://bugzilla.redhat.com/2467279","tags":["report"]},{"url":"https://bugzilla.redhat.com/2467289","tags":["report"]},{"url":"https://bugzilla.redhat.com/2467437","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-20611.html","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3832","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-5419","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-20612.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-20613.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-42011","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1780068674.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1780069034.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1780389355.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33846","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42009","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42012","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42013","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42014","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5260","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1780484200.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42015","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1784268522.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1784559374.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1790280771.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1790677972.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1790678814.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1791496727.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1791497467.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1791497901.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42011.json","tags":["advisory"]},{"url":"https://gitlab.com/gnutls/gnutls","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-42011","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13274.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445762","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3832","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3832","tags":["advisory"]},{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1801","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445763","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3833","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3833","tags":["advisory"]},{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1803","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467450","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-5260","tags":["advisory"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-10","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467686","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-5419","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5419","tags":["advisory"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-13","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2450624","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33845","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33845","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2450625","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33846","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467279","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42009","tags":["advisory"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-2","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467289","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42010","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42010","tags":["advisory"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-4","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42011","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467441","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42012","tags":["advisory"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-7","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467448","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42013","tags":["advisory"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-8","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467451","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42014","tags":["advisory"]},{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1766","tags":["article"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-9","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467678","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42015","tags":["advisory"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-11","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20611.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20612.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20613.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26409.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_30004.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2423177","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_30849.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-12133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-12133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12133","tags":["advisory"]},{"url":"https://gitlab.com/gnutls/libtasn1/-/blob/master/doc/security/CVE-2024-12133.md","tags":["article"]},{"url":"https://gitlab.com/gnutls/libtasn1/-/issues/52","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-14831","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-14831","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14831","tags":["advisory"]},{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1773","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_30850.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_32962.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33125.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41921.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_43575.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:20611","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:20612","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:20613","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262087-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1263704","tags":["report"]},{"url":"https://bugzilla.suse.com/1263705","tags":["report"]},{"url":"https://bugzilla.suse.com/1263707","tags":["report"]},{"url":"https://bugzilla.suse.com/1263708","tags":["report"]},{"url":"https://bugzilla.suse.com/1263709","tags":["report"]},{"url":"https://bugzilla.suse.com/1263710","tags":["report"]},{"url":"https://bugzilla.suse.com/1263711","tags":["report"]},{"url":"https://bugzilla.suse.com/1263712","tags":["report"]},{"url":"https://bugzilla.suse.com/1263713","tags":["report"]},{"url":"https://bugzilla.suse.com/1263714","tags":["report"]},{"url":"https://bugzilla.suse.com/1263715","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5260","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262115-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1263716","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5419","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621752-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1263706","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3832","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621784-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621815-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621867-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262822-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1257960","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14831","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262923-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262924-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-42011","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8284-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8539-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-42012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42015","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-42011","title":"Gnutls: gnutls: security bypass due to incorrect name constraint handling","description":"A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.","status":"published","published":"2026-05-07T13:51:04.695Z","modified":"2026-11-09T17:14:07.306Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-295"],"updated_at":"2026-11-09T19:34:29.555364Z"}],"euvd":[{"id":"EUVD-2026-28386","description":"A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.","status":"published","published":"2026-05-07T13:51:04Z","modified":"2026-11-09T17:14:07Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-09T18:17:39.592818Z"}],"ghsa":[{"id":"GHSA-568w-37qx-3qc6","title":"A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were...","description":"A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.","status":"published","published":"2026-05-07T15:38:42Z","modified":"2026-11-09T18:31:42Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-295"],"updated_at":"2026-11-09T18:49:19.883486Z"}],"nvd":[{"id":"CVE-2026-42011","description":"A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.","status":"published","published":"2026-05-07T15:16:09.76Z","modified":"2026-11-09T18:17:27.887Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-295"],"updated_at":"2026-11-09T20:15:30.596824Z"}],"osv":[{"id":"ALPINE-CVE-2026-42011","description":"A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.","status":"published","published":"2026-05-07T15:16:09.76Z","modified":"2026-10-01T02:17:49.288551303Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:27:50.764331Z"},{"id":"BELL-CVE-2026-42011","status":"published","published":"2026-05-03T06:12:22.51139Z","modified":"2026-05-12T07:15:11.914255Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:23.844435Z"},{"id":"CVE-2026-42011","title":"Gnutls: gnutls: security bypass due to incorrect name constraint handling","description":"A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.","status":"published","published":"2026-05-07T13:51:04.695Z","modified":"2026-11-07T02:31:06.209051177Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-295"],"updated_at":"2026-11-07T03:08:05.086112Z"},{"id":"DEBIAN-CVE-2026-42011","description":"A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.","status":"published","published":"2026-05-07T15:16:09.76Z","modified":"2026-10-31T09:47:28.612812489Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:54.892385Z"},{"id":"RHSA-2026:13274","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-05-04T10:09:53Z","modified":"2026-10-16T10:10:47Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:20611","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2026-05-27T10:07:21Z","modified":"2026-10-16T10:13:04Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:20612","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2026-06-03T10:19:34Z","modified":"2026-10-16T10:13:04Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:20613","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2026-06-02T10:08:05Z","modified":"2026-10-16T10:13:05Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:26409","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2026-06-17T10:08:48Z","modified":"2026-10-16T10:14:15Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:30004","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2026-06-26T11:46:40Z","modified":"2026-10-16T10:15:27Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:30849","title":"Red Hat Security Advisory: gnutls and libtasn1 security update","status":"published","published":"2026-06-29T11:29:41Z","modified":"2026-10-16T10:15:32Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:30850","title":"Red Hat Security Advisory: gnutls and libtasn1 security update","status":"published","published":"2026-06-29T11:29:42Z","modified":"2026-10-16T10:15:33Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:32962","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2026-06-30T10:49:21Z","modified":"2026-10-16T10:15:42Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:33125","title":"Red Hat Security Advisory: gnutls and libtasn1 security update","status":"published","published":"2026-06-30T10:49:29Z","modified":"2026-10-16T10:15:45Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:41921","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2026-07-23T10:13:46Z","modified":"2026-10-16T10:17:43Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:43575","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2026-07-23T10:14:32Z","modified":"2026-10-15T10:19:30Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RLSA-2026:20611","title":"Important: gnutls security update","description":"Please update the gnutls packages to provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.\n\nSecurity Fix(es):\n* gnutls: Add more checks to DTLS reassembly (CVE-2026-33846)\n* gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)\n* gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845)\n* gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)\n* gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833)\n* gnutls: Fix intersecting empty constraints (CVE-2026-42011)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-29T00:00:17.757413Z","modified":"2026-05-29T00:30:04.786970928Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:20612","title":"Important: gnutls security update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library,\nwhich implements cryptographic algorithms and protocols such as SSL, TLS, and\nDTLS.\n\nSecurity Fix(es):\n\n* gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)\n* gnutls: Fix crashing on an underflow with a DTLS datagram\n(CVE-2026-33845)\n* gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)\n* gnutls: Fix case-sensitivity of domain name comparison in name\nconstraints (CVE-2026-3833)\n* gnutls: Fix intersecting empty name constraints (CVE-2026-42011)\n* gnutls: Denial of Service via heap buffer overflow in DTLS handshake\nfragment reassembly (CVE-2026-33846)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.","status":"published","published":"2026-06-02T18:03:08.506628Z","modified":"2026-06-02T18:25:39.713855542Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:20613","title":"Important: gnutls security update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library,\nwhich implements cryptographic algorithms and protocols such as SSL, TLS, and\nDTLS.\n\nSecurity Fix(es):\n\n* gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)\n* gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845)\n* gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)\n* gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833)\n* gnutls: Fix intersecting empty name constraints (CVE-2026-42011)\n* gnutls: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly (CVE-2026-33846)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.","status":"published","published":"2026-06-05T12:04:50.053452Z","modified":"2026-06-05T12:30:04.571139482Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"UBUNTU-CVE-2026-42011","description":"A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.","status":"published","published":"2026-05-07T15:16:00Z","modified":"2026-07-14T23:44:43.20622421Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T16:56:18.393417Z"},{"id":"ALSA-2026:20611","title":"Important: gnutls security update","description":"Please update the gnutls packages to provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.  \n\nSecurity Fix(es):  \n\n  * gnutls: Add more checks to DTLS reassembly (CVE-2026-33846)\n  * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)\n  * gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845)\n  * gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)\n  * gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833)\n  * gnutls: Fix intersecting empty constraints (CVE-2026-42011)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-26T00:00:00Z","modified":"2026-10-29T11:12:11.752999085Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:20612","title":"Important: gnutls security update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library,  \nwhich implements cryptographic algorithms and protocols such as SSL, TLS, and  \nDTLS.  \n\nSecurity Fix(es):  \n\n  * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)\n  * gnutls: Fix crashing on an underflow with a DTLS datagram\n\n\n(CVE-2026-33845)  \n\n  * gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)\n  * gnutls: Fix case-sensitivity of domain name comparison in name\n\n\nconstraints (CVE-2026-3833)  \n\n  * gnutls: Fix intersecting empty name constraints (CVE-2026-42011)\n  * gnutls: Denial of Service via heap buffer overflow in DTLS handshake\n\n\nfragment reassembly (CVE-2026-33846)  \n\nFor more details about the security issue(s), including the impact, a CVSS  \nscore, acknowledgments, and other related information, refer to the CVE page(s)  \nlisted in the References section.\n","status":"published","published":"2026-05-26T00:00:00Z","modified":"2026-10-29T11:42:21.413259386Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:20613","title":"Important: gnutls security update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library,  \nwhich implements cryptographic algorithms and protocols such as SSL, TLS, and  \nDTLS.  \n\nSecurity Fix(es):  \n\n  * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)\n  * gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845)\n  * gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)\n  * gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833)\n  * gnutls: Fix intersecting empty name constraints (CVE-2026-42011)\n  * gnutls: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly (CVE-2026-33846)\n\n\nFor more details about the security issue(s), including the impact, a CVSS  \nscore, acknowledgments, and other related information, refer to the CVE page(s)  \nlisted in the References section.\n","status":"published","published":"2026-05-26T00:00:00Z","modified":"2026-10-29T11:42:23.859257804Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"CLSA-2026-1780068674","title":"gnutls: Fix of 8 CVEs","description":"- CVE-2026-33846: DTLS handshake reassembly add more checks (buffers.c)\n- CVE-2026-42009: DTLS reorder qsort with duplicate sequence numbers\n- CVE-2026-42011: X.509 name constraints intersection of empty constraints\n- CVE-2026-42012: URI/SRV SAN preclude CN fallback\n- CVE-2026-42013: prevent fallback on oversized SAN\n- CVE-2026-42014: PKCS#11 token set_pin UAF + leak\n- CVE-2026-5260: PKCS#11 RSA short-ciphertext overread; ciphertext must match modulus size\n- CVE-2026-42015: PKCS#12 bag-element off-by-one bound check","status":"published","published":"2026-05-29T15:31:18Z","modified":"2026-10-26T09:43:37.564428431Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1780069034","title":"gnutls: Fix of 8 CVEs","description":"- CVE-2026-33846: DTLS handshake reassembly add more checks (buffers.c)\n- CVE-2026-42009: DTLS reorder qsort with duplicate sequence numbers\n- CVE-2026-42011: X.509 name constraints intersection of empty constraints\n- CVE-2026-42012: URI/SRV SAN preclude CN fallback\n- CVE-2026-42013: prevent fallback on oversized SAN\n- CVE-2026-42014: PKCS#11 token set_pin UAF + leak\n- CVE-2026-5260: PKCS#11 RSA short-ciphertext overread; ciphertext must match modulus size\n- CVE-2026-42015: PKCS#12 bag-element off-by-one bound check","status":"published","published":"2026-05-29T15:37:18Z","modified":"2026-10-26T09:43:51.017513344Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1780389355","title":"gnutls: Fix of 7 CVEs","description":"- CVE-2026-33846: fix heap buffer overflow in DTLS handshake fragment\n  reassembly by validating message-length consistency and bounding the\n  fragment write against the destination buffer capacity\n- CVE-2026-42009: fix undefined behaviour in DTLS packet ordering by making\n  the handshake_compare qsort comparator return 0 for equal sequence numbers\n- CVE-2026-42011: fix name constraints bypass by no longer short-circuiting\n  the intersection of an empty permitted set, so later permitted constraints\n  are still enforced\n- CVE-2026-42012: fix certificate verification bypass by making URI and SRV\n  subjectAltName entries preclude the legacy CN fallback hostname check\n- CVE-2026-42013: fix certificate verification bypass by preventing CN and\n  DN-email fallback when a subjectAltName entry is oversized\n- CVE-2026-5260: fix heap overread in RSA key exchange by rejecting a\n  ciphertext whose size does not match the RSA modulus\n- CVE-2026-42014: fix use-after-free and leak in gnutls_pkcs11_token_set_pin\n  when changing the security officer PIN","status":"published","published":"2026-06-02T08:36:15Z","modified":"2026-10-26T09:43:49.1979246Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1780484200","title":"gnutls: Fix of 8 CVEs","description":"- CVE-2026-33846: fix heap buffer overflow in DTLS handshake fragment\n  reassembly by validating message-length consistency and bounding the\n  fragment write against the destination buffer capacity\n- CVE-2026-42009: fix undefined behaviour in DTLS packet ordering by making\n  the handshake_compare qsort comparator return 0 for equal sequence numbers\n- CVE-2026-42011: fix name constraints bypass by no longer short-circuiting\n  the intersection of an empty permitted set, so later permitted constraints\n  are still enforced\n- CVE-2026-42012: fix certificate verification bypass by making URI and SRV\n  subjectAltName entries preclude the legacy CN fallback hostname check\n- CVE-2026-42013: fix certificate verification bypass by preventing CN and\n  DN-email fallback when a subjectAltName entry is oversized\n- CVE-2026-5260: fix heap overread in RSA key exchange by rejecting a\n  ciphertext whose size does not match the RSA modulus\n- CVE-2026-42014: fix use-after-free and leak in gnutls_pkcs11_token_set_pin\n  when changing the security officer PIN\n- CVE-2026-42015: fix off-by-one out-of-bounds write when appending an\n  element to a PKCS#12 bag that already holds the maximum number of elements","status":"published","published":"2026-06-03T10:57:05Z","modified":"2026-10-26T09:43:53.907767421Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1784268522","title":"Fix CVE(s): CVE-2026-42011, CVE-2026-42012, CVE-2026-42013, CVE-2026-42015","description":"   * SECURITY UPDATE: name-constraints bypass with excluded-only parent CA\n     - debian/patches/CVE-2026-42011.patch: take permitted name\n       constraints into account when a prior CA in the chain carried only\n       excluded constraints, so a constrained sub-CA can no longer issue\n       certificates outside its permitted scope, in\n       lib/x509/name_constraints.c.\n     - CVE-2026-42011\n   * SECURITY UPDATE: CN fallback not precluded by URI SAN\n     - debian/patches/CVE-2026-42012.patch: treat a URI subject\n       alternative name as precluding the fallback to Common Name\n       hostname matching, per RFC 6125 6.4.4, in\n       lib/x509/hostname-verify.c.\n     - CVE-2026-42012\n   * SECURITY UPDATE: CN/DN fallback not precluded by oversized SAN\n     - debian/patches/CVE-2026-42013.patch: keep the CN (hostname) and\n       DN-email fallbacks disabled when a subject alternative name is\n       oversized instead of silently ignoring it, per RFC 6125 6.4.4, in\n       lib/x509/hostname-verify.c and lib/x509/email-verify.c.\n     - CVE-2026-42013\n   * SECURITY UPDATE: PKCS#12 bag out-of-bounds write\n     - debian/patches/CVE-2026-42015.patch: fix an off-by-one in the\n       PKCS#12 bag element bounds check that allowed writing past the\n       32-element array, in lib/x509/pkcs12_bag.c.\n     - CVE-2026-42015","status":"published","published":"2026-07-17T06:09:11Z","modified":"2026-10-26T09:31:47.202590922Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1784559374","title":"Fix CVE(s): CVE-2026-42011, CVE-2026-42012, CVE-2026-42013","description":"   * SECURITY UPDATE: Name constraints bypass when prior CAs have only\n     excluded constraints\n     - debian/patches/CVE-2026-42011.patch: remove the empty-permitted early\n       return in name_constraints_node_list_intersect in\n       lib/x509/name_constraints.c so permitted name constraints of a\n       subsequent CA still propagate when previous CAs only carried excluded\n       constraints; also backport the upstream regression suites to\n       tests/name-constraints-merge.c\n     - CVE-2026-42011\n   * SECURITY UPDATE: Certificate validation bypass via oversized subject\n     alternative name\n     - debian/patches/CVE-2026-42013.patch: refactor the CN and DN-email\n       fallback logic and disable the fallback when\n       gnutls_x509_crt_get_subject_alt_name reports an oversized SAN\n       (GNUTLS_E_SHORT_MEMORY_BUFFER) in gnutls_x509_crt_check_hostname2 and\n       gnutls_x509_crt_check_email (lib/x509/hostname-verify.c,\n       lib/x509/email-verify.c); also backport the upstream regression tests to\n       tests/hostname-check.c and tests/cert-tests/email (with\n       tests/cert-tests/email-certs/oversized-san.pem)\n     - CVE-2026-42013\n   * SECURITY UPDATE: CN fallback not precluded by URI or SRV subject\n     alternative names\n     - debian/patches/CVE-2026-42012.patch: add GNUTLS_SAN_URI and\n       GNUTLS_SAN_OTHERNAME_SRV to the PRECLUDES_CN_FALLBACK macro in\n       lib/x509/hostname-verify.c so certificates presenting URI or SRV SANs no\n       longer allow hostname matching against the common name per RFC 6125\n       6.4.4; backport SRV virtual-SAN awareness (lib/includes/gnutls/gnutls.h.in,\n       lib/x509/common.h, lib/x509/virt-san.c, lib/x509/output.c, lib/x509/x509.c)\n       and the get_alt_name othername virtualization fix so SRV othernames are\n       recognized on 3.6.13; also backport the upstream regression tests to\n       tests/hostname-check.c\n     - CVE-2026-42012","status":"published","published":"2026-07-20T14:56:45Z","modified":"2026-10-26T09:32:05.529947923Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1790280771","title":"gnutls: Fix of 10 CVEs","description":"- Rebased onto the vendor 3.3.29-9.0.3.el7_9 sources\n- CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread (TuxCare fix retained)\n- CVE-2026-42014 and CVE-2026-42015 are fixed by the vendor in this build\n- CVE-2026-42011 is not applicable to this baseline per the vendor assessment\n- CVE-2026-33845, CVE-2026-33846, CVE-2026-3833, CVE-2026-42009, CVE-2026-42012 and CVE-2026-42013 are now fixed by the vendor; the TuxCare duplicates are dropped\n- CVE-2026-3833 follow-up: the vendor's email_matches() no longer matches a\n  bare-domain rfc822Name against a bare-domain constraint of the same length,\n  which 3.3.29 did; restore that comparison, case-insensitively, and add the\n  assertions to tests/name-constraints.c","status":"published","published":"2026-09-24T20:13:00Z","modified":"2026-10-26T09:43:38.509360485Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1790677972","title":"gnutls: Fix of 10 CVEs","description":"- Rebased onto the vendor 3.3.29-9.0.3.el7_9 sources\n- CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread (TuxCare fix retained)\n- CVE-2026-42014 and CVE-2026-42015 are fixed by the vendor in this build\n- CVE-2026-42011 is not applicable to this baseline per the vendor assessment\n- CVE-2026-33845, CVE-2026-33846, CVE-2026-3833, CVE-2026-42009, CVE-2026-42012 and CVE-2026-42013 are now fixed by the vendor; the TuxCare duplicates are dropped\n- CVE-2026-3833 follow-up: the vendor's email_matches() no longer matches a\n  bare-domain rfc822Name against a bare-domain constraint of the same length,\n  which 3.3.29 did; restore that comparison, case-insensitively, and add the\n  assertions to tests/name-constraints.c","status":"published","published":"2026-09-30T16:34:20Z","modified":"2026-10-26T09:43:53.397959753Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790678814","title":"gnutls: Fix of 10 CVEs","description":"- Rebased onto the vendor 3.3.29-9.0.3.el7_9 sources\n- CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread (TuxCare fix retained)\n- CVE-2026-42014 and CVE-2026-42015 are fixed by the vendor in this build\n- CVE-2026-42011 is not applicable to this baseline per the vendor assessment\n- CVE-2026-33845, CVE-2026-33846, CVE-2026-3833, CVE-2026-42009, CVE-2026-42012 and CVE-2026-42013 are now fixed by the vendor; the TuxCare duplicates are dropped\n- CVE-2026-3833 follow-up: the vendor's email_matches() no longer matches a\n  bare-domain rfc822Name against a bare-domain constraint of the same length,\n  which 3.3.29 did; restore that comparison, case-insensitively, and add the\n  assertions to tests/name-constraints.c","status":"published","published":"2026-09-29T10:47:03Z","modified":"2026-10-26T09:43:53.989474697Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1791496727","title":"gnutls: Fix of CVE-2026-42011","description":"- CVE-2026-42011: a CA carrying only excluded name constraints, or permitted\n  ones of another name type, no longer causes the permitted name constraints\n  of a CA below it to be dropped during chain verification. This corrects the\n  els1 entry: 3.3.29 is affected through the APPEND path of\n  gnutls_x509_ext_import_name_constraints()","status":"published","published":"2026-10-08T21:58:58Z","modified":"2026-10-26T09:31:49.528003792Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1791497467","title":"gnutls: Fix of CVE-2026-42011","description":"- CVE-2026-42011: a CA carrying only excluded name constraints, or permitted\n  ones of another name type, no longer causes the permitted name constraints\n  of a CA below it to be dropped during chain verification. This corrects the\n  els1 entry: 3.3.29 is affected through the APPEND path of\n  gnutls_x509_ext_import_name_constraints()","status":"published","published":"2026-10-08T22:11:17Z","modified":"2026-10-26T09:31:46.19869773Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1791497901","title":"gnutls: Fix of CVE-2026-42011","description":"- CVE-2026-42011: a CA carrying only excluded name constraints, or permitted\n  ones of another name type, no longer causes the permitted name constraints\n  of a CA below it to be dropped during chain verification. This corrects the\n  els1 entry: 3.3.29 is affected through the APPEND path of\n  gnutls_x509_ext_import_name_constraints()","status":"published","published":"2026-10-08T22:18:30Z","modified":"2026-10-26T09:31:46.656463638Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"openSUSE-SU-2026:10691-1","title":"gnutls-3.8.13-1.1 on GA media","description":"These are all security issues fixed in the gnutls-3.8.13-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-05T00:00:00Z","modified":"2026-05-06T08:00:51.956627Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:20778-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2026-3832: cert-session: fix multi-entry OCSP revocation bypass (bsc#1263706).\n- CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).\n- CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).\n- CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).\n- CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).\n- CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).\n- CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).\n- CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).\n- CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).\n- CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).\n- CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).\n- CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).\n- CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).\n","status":"published","published":"2026-05-18T10:08:52Z","modified":"2026-05-26T18:24:12.498703192Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-42011","title":"CVE-2026-42011 in rootio-gnutls28 - Patched by Root","description":"Root has patched CVE-2026-42011 in the rootio-gnutls28 package for Root:Debian:13. Multiple fixed versions available.","status":"withdrawn","published":"2026-05-15T12:30:04Z","modified":"2026-05-27T20:00:15.122301077Z","updated_at":"2026-11-02T15:53:33.681527Z"},{"id":"SUSE-SU-2026:2087-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).\n- CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).\n- CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).\n- CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).\n- CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).\n- CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).\n- CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).\n- CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).\n- CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).\n- CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).\n- CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).\n","status":"published","published":"2026-05-27T07:57:57Z","modified":"2026-05-28T08:15:05.84449681Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:2115-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).\n- CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).\n- CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).\n- CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).\n- CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).\n- CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).\n- CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).\n- CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).\n- CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).\n- CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).\n- CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).\n- CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).\n","status":"published","published":"2026-05-29T15:27:34Z","modified":"2026-05-30T23:15:06.412281054Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:21752-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2026-3832: cert-session: fix multi-entry OCSP revocation bypass (bsc#1263706).\n- CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).\n- CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).\n- CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).\n- CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).\n- CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).\n- CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).\n- CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).\n- CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).\n- CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).\n- CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).\n- CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).\n- CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).\n","status":"published","published":"2026-05-18T10:06:30Z","modified":"2026-05-27T18:24:07.326198115Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:21784-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).\n- CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).\n- CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).\n- CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).\n- CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).\n- CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).\n- CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).\n- CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).\n- CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).\n- CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).\n- CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).\n- CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).\n","status":"published","published":"2026-05-22T09:27:57Z","modified":"2026-05-28T18:24:07.066129397Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:21815-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2026-3832: cert-session: fix multi-entry OCSP revocation bypass (bsc#1263706).\n- CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).\n- CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).\n- CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).\n- CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).\n- CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).\n- CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).\n- CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).\n- CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).\n- CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).\n- CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).\n- CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).\n- CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).\n","status":"published","published":"2026-05-18T10:06:30Z","modified":"2026-05-28T18:24:12.731393373Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:21867-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).\n- CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).\n- CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).\n- CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).\n- CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).\n- CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).\n- CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).\n- CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).\n- CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).\n- CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).\n- CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).\n- CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).\n","status":"published","published":"2026-05-22T09:56:54Z","modified":"2026-06-03T18:24:20.450375886Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:2822-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a\n  large number of name constraints and SANs (bsc#1257960).\n- CVE-2026-3833: incorrectly accepted domain names due to comparison during name constraints processing being\n  case-sensitive (bsc#1263707).\n- CVE-2026-5260: heap overread when processing extremely short premaster secret as part of an RSA key exchange\n  (bsc#1263715).\n- CVE-2026-33845: integer overflow and heap overrun when parsing fragments with zero length and non-zero offset during\n  DTLS handshake (bsc#1263704).\n- CVE-2026-33846: heap overwrite during DTLS handshake fragment reassembly due to missing validations and checks\n  (bsc#1263705).\n- CVE-2026-42009: undefined behavior resulting in a DoS when handling DTLS packets with duplicate sequence numbers\n  (bsc#1263708).\n- CVE-2026-42010: authentication bypass when processing a PSK username with a NUL-character (bsc#1263709).\n- CVE-2026-42011: name constraint bypass leading to acceptance of invalid certificates during certificate validation\n  (bsc#1263710).\n- CVE-2026-42012: spoofing of legitimate services and sensitive information interception via specially crafted\n  certificates containing URIs or SRV SANs. (bsc#1263711).\n- CVE-2026-42013: certificate validation bypass when validating certificates with an oversized SAN (bsc#1263712).\n- CVE-2026-42014: use-after-free when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks\n  a protected authentication path (bsc#1263713).\n- CVE-2026-42015: memory corruption when appending to a PKCS#12 bag that already contains 32 elements (bsc#1263714).\n","status":"published","published":"2026-07-09T18:07:12Z","modified":"2026-07-10T10:00:06.103026362Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:2923-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2026-3833: incorrectly accepted domain names due to comparison during name constraints processing being\n  case-sensitive (bsc#1263707).\n- CVE-2026-5260: heap overread when processing extremely short premaster secret as part of an RSA key exchange\n  (bsc#1263715).\n- CVE-2026-42011: name constraint bypass leading to acceptance of invalid certificates during certificate validation\n  (bsc#1263710).\n- CVE-2026-42013: certificate validation bypass when validating certificates with an oversized SAN (bsc#1263712).\n- CVE-2026-42014: use-after-free when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks\n  a protected authentication path (bsc#1263713).\n- CVE-2026-42015: memory corruption when appending to a PKCS#12 bag that already contains 32 elements (bsc#1263714).\n","status":"published","published":"2026-07-13T17:49:40Z","modified":"2026-07-15T10:00:04.810597629Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:2924-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues\n\n- CVE-2026-3833: incorrectly accepted domain names due to comparison during name constraints processing being\n  case-sensitive (bsc#1263707).\n- CVE-2026-5260: heap overread when processing extremely short premaster secret as part of an RSA key exchange\n  (bsc#1263715).\n- CVE-2026-42011: name constraint bypass leading to acceptance of invalid certificates during certificate validation\n  (bsc#1263710).\n- CVE-2026-42013: certificate validation bypass when validating certificates with an oversized SAN (bsc#1263712).\n- CVE-2026-42014: use-after-free when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks\n  a protected authentication path (bsc#1263713).\n- CVE-2026-42015: memory corruption when appending to a PKCS#12 bag that already contains 32 elements (bsc#1263714).\n","status":"published","published":"2026-07-13T17:51:19Z","modified":"2026-07-15T10:00:04.851404109Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"USN-8539-1","title":"gnutls28 vulnerabilities","description":"Haruto Kimura discovered that GnuTLS did not properly apply permitted\nname constraints in certain certificate validation paths. A remote\nattacker could possibly use this issue to bypass certificate validation,\nleading to a machine-in-the-middle attack. (CVE-2026-42011)\n\nOleh Konko discovered that GnuTLS incorrectly fell back to Common Name\nchecks for certain URI and SRV subject alternative names. A remote\nattacker could possibly use this issue to bypass certificate validation,\nleading to a machine-in-the-middle attack. (CVE-2026-42012)\n\nHaruto Kimura and Joshua Rogers discovered that GnuTLS incorrectly fell\nback to Common Name checks when subject alternative names were\noversized. A remote attacker could possibly use this issue to bypass\ncertificate validation, leading to a machine-in-the-middle attack.\n(CVE-2026-42013)\n\nLuigino Camastra and Joshua Rogers discovered that GnuTLS had a\nuse-after-free issue when changing PKCS#11 token security officer PINs\nin certain cases. An attacker could possibly use this issue to cause\nGnuTLS to crash, resulting in a denial of service, or execute arbitrary\ncode. (CVE-2026-42014)\n\nZou Dikai discovered that GnuTLS did not properly validate PKCS#12 bag\nsizes in certain cases. An attacker could possibly use this issue to\ncause GnuTLS to crash, resulting in a denial of service, or execute\narbitrary code. (CVE-2026-42015)","status":"published","published":"2026-07-14T15:16:35Z","modified":"2026-07-14T23:44:42.938727941Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}