{"id":"CLSA-2026-1779744941","summary":"gnutls: Fix of CVE-2026-42010","details":"- CVE-2026-42010: server RSA-PSK key exchange truncates the binary PSK\n  identity at the first NUL byte when looking up the pre-shared key,\n  causing usernames containing embedded NUL bytes to match shorter\n  legitimate identities and allowing authentication bypass","modified":"2026-10-26T09:31:37.549839290Z","published":"2026-05-25T21:35:46Z","upstream":["CVE-2026-42010"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1779744941.html"}],"affected":[{"package":{"name":"gnutls","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/gnutls?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8.1.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779744941.json"}},{"package":{"name":"gnutls-c++","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/gnutls-c++?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8.1.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779744941.json"}},{"package":{"name":"gnutls-dane","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/gnutls-dane?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8.1.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779744941.json"}},{"package":{"name":"gnutls-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/gnutls-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8.1.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779744941.json"}},{"package":{"name":"gnutls-utils","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/gnutls-utils?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8.1.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779744941.json"}}],"schema_version":"1.9.0"}