{"id":"CLSA-2026-1784018158","summary":"Fix CVE(s): CVE-2026-33846, CVE-2026-42009, CVE-2026-5260","details":"   * SECURITY UPDATE: heap buffer overflow in DTLS handshake reassembly\n     - debian/patches/CVE-2026-33846.patch: add length-consistency and array\n       bounds checks in merge_handshake_packet in lib/buffers.c to reject DTLS\n       fragments with mismatching or oversized claimed length\n     - CVE-2026-33846\n   * SECURITY UPDATE: denial of service via non-conforming qsort comparator\n     - debian/patches/CVE-2026-42009.patch: return 0 for equal sequence numbers\n       in handshake_compare in lib/buffers.c so DTLS packet ordering follows the\n       qsort strict-weak-ordering contract\n     - CVE-2026-42009\n   * SECURITY UPDATE: heap over-read on short RSA-PSK ciphertext with PKCS#11 key\n     - debian/patches/CVE-2026-5260.patch: verify ciphertext size matches the RSA\n       modulus in _gnutls_proc_rsa_psk_client_kx in lib/auth/rsa_psk.c and size\n       the PKCS#11 decrypt buffer with MAX(siglen, plaintext_size) in\n       lib/pkcs11_privkey.c (the RSA path uses the allocating decrypt API and is\n       not affected)\n     - CVE-2026-5260","modified":"2026-10-26T09:32:03.571353167Z","published":"2026-07-14T08:36:17Z","upstream":["CVE-2026-33846","CVE-2026-42009","CVE-2026-5260"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1784018158.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33846"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42009"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5260"}],"affected":[{"package":{"name":"gnutls-bin","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/gnutls-bin?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784018158.json"}},{"package":{"name":"gnutls-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/gnutls-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784018158.json"}},{"package":{"name":"libgnutls-dane0","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libgnutls-dane0?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784018158.json"}},{"package":{"name":"libgnutls-openssl27","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libgnutls-openssl27?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784018158.json"}},{"package":{"name":"libgnutls28-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libgnutls28-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784018158.json"}},{"package":{"name":"libgnutls30","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libgnutls30?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784018158.json"}},{"package":{"name":"libgnutlsxx28","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libgnutlsxx28?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784018158.json"}}],"schema_version":"1.9.0"}