Summary
[3.3.29-9.0.1]
- Regenerate PKCS#11 test certificates [Orabug: 39674042]
- Fix for CVE-2026-33845 CVE-2026-33846 CVE-2026-42009 [Orabug: 39674042]
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | gnutls | 0:3.3.29-9.0.1.el7_9 |
| Oracle Linux · 7 | gnutls-c++ | 0:3.3.29-9.0.1.el7_9 |
| Oracle Linux · 7 | gnutls-dane | 0:3.3.29-9.0.1.el7_9 |
| Oracle Linux · 7 | gnutls-devel | 0:3.3.29-9.0.1.el7_9 |
| Oracle Linux · 7 | gnutls-utils | 0:3.3.29-9.0.1.el7_9 |
Vulnerabilities 3
-
High 7.5
Gnutls: gnutls: denial of service via dtls zero-length fragment
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information dis…
-
High 7.5
Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based solely on handshake type, without validating th…
-
High 7.5
Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets …