ALSA-2026:20611

Source
https://errata.almalinux.org/8/ALSA-2026-20611.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:20611.json
JSON Data
https://api.test.osv.dev/v1/vulns/ALSA-2026:20611
Related
Published
2026-05-26T00:00:00Z
Modified
2026-05-27T14:14:06.822103490Z
Summary
Important: gnutls security update
Details

Please update the gnutls packages to provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

  • gnutls: Add more checks to DTLS reassembly (CVE-2026-33846)
  • gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)
  • gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845)
  • gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)
  • gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833)
  • gnutls: Fix intersecting empty constraints (CVE-2026-42011)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:8 / gnutls

Package

Name
gnutls
Purl
pkg:rpm/almalinux/gnutls

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.16-8.el8_10.6

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:20611.json"

AlmaLinux:8 / gnutls-c++

Package

Name
gnutls-c++
Purl
pkg:rpm/almalinux/gnutls-c%2B%2B

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.16-8.el8_10.6

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:20611.json"

AlmaLinux:8 / gnutls-dane

Package

Name
gnutls-dane
Purl
pkg:rpm/almalinux/gnutls-dane

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.16-8.el8_10.6

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:20611.json"

AlmaLinux:8 / gnutls-devel

Package

Name
gnutls-devel
Purl
pkg:rpm/almalinux/gnutls-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.16-8.el8_10.6

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:20611.json"

AlmaLinux:8 / gnutls-utils

Package

Name
gnutls-utils
Purl
pkg:rpm/almalinux/gnutls-utils

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.16-8.el8_10.6

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:20611.json"