{"id":"CLSA-2026-1782138503","summary":"gnutls: Fix of 9 CVEs","details":"- CVE-2026-42014: fix use-after-free and leak in gnutls_pkcs11_token_set_pin when\n  changing the Security Officer PIN with oldpin == NULL on a token lacking a\n  protected authentication path\n- CVE-2026-42015: fix off-by-one bounds check in gnutls_pkcs12_bag_set_data that\n  allowed writing past the 32-element PKCS#12 bag array when appending to an\n  imported bag already holding the maximum number of elements","modified":"2026-10-26T09:30:21.679632220Z","published":"2026-08-17T15:15:04Z","upstream":["CVE-2026-42014","CVE-2026-42015"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1782138503.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32989"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33846"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42009"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42011"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42012"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42013"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42014"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42015"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5260"}],"affected":[{"package":{"name":"gnutls","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/gnutls?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.4.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1782138503.json"}},{"package":{"name":"gnutls-c++","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/gnutls-c++?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.4.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1782138503.json"}},{"package":{"name":"gnutls-dane","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/gnutls-dane?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.4.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1782138503.json"}},{"package":{"name":"gnutls-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/gnutls-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.4.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1782138503.json"}},{"package":{"name":"gnutls-utils","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/gnutls-utils?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.4.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1782138503.json"}}],"schema_version":"1.9.0"}