{"id":"CLSA-2026-1783689031","summary":"Fix CVE(s): CVE-2026-33846, CVE-2026-42009, CVE-2026-5260","details":"   * SECURITY UPDATE: heap buffer overflow in DTLS handshake reassembly\n     - debian/patches/CVE-2026-33846.patch: add length-consistency and array\n       bounds checks in merge_handshake_packet in lib/buffers.c to reject DTLS\n       fragments with mismatching or oversized claimed length\n     - CVE-2026-33846\n   * SECURITY UPDATE: denial of service via non-conforming qsort comparator\n     - debian/patches/CVE-2026-42009.patch: return 0 for equal sequence numbers\n       in handshake_compare in lib/buffers.c so DTLS packet ordering follows the\n       qsort strict-weak-ordering contract\n     - CVE-2026-42009\n   * SECURITY UPDATE: heap over-read on short RSA ciphertext with PKCS#11 key\n     - debian/patches/CVE-2026-5260.patch: verify ciphertext size matches the RSA\n       modulus in proc_rsa_client_kx and _gnutls_proc_rsa_psk_client_kx\n       (lib/auth/rsa.c, lib/auth/rsa_psk.c) and size the PKCS#11 decrypt buffer\n       with MAX(siglen, plaintext_size) in lib/pkcs11_privkey.c\n     - CVE-2026-5260","modified":"2026-10-26T09:32:05.540625815Z","published":"2026-07-10T13:10:48Z","upstream":["CVE-2026-33846","CVE-2026-42009","CVE-2026-5260"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1783689031.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33846"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42009"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5260"}],"affected":[{"package":{"name":"gnutls-bin","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/gnutls-bin?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1783689031.json"}},{"package":{"name":"gnutls-doc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/gnutls-doc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1783689031.json"}},{"package":{"name":"guile-gnutls","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/guile-gnutls?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1783689031.json"}},{"package":{"name":"libgnutls-dane0","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libgnutls-dane0?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1783689031.json"}},{"package":{"name":"libgnutls-openssl27","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libgnutls-openssl27?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1783689031.json"}},{"package":{"name":"libgnutls28-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libgnutls28-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1783689031.json"}},{"package":{"name":"libgnutls30","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libgnutls30?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1783689031.json"}},{"package":{"name":"libgnutlsxx28","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libgnutlsxx28?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.12+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1783689031.json"}}],"schema_version":"1.9.0"}