gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier URI or Service SRV Subject Alternative Names SANs. This could cause the certificate validation process to incorrectly fall back to...

gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

A flaw was found in gnutls. An off-by-one error exists in the PKCS12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of...

Important: Red Hat Security Advisory: gnutls security update

An update for gnutls is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

ROS-20260625-73-0006

The vulnerability in gnutls is related to incorrect input of configuration data. The vulnerability can be exploited remotely...

ROS-20260625-73-0008

The vulnerability in gnutls is related to manipulating an unknown input, resulting in a time mismatch. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

ROS-20260625-73-0010

The vulnerability in gnutls is related to errors in the certificate validation process. Exploitation of this vulnerability can be carried out remotely...

ROS-20260625-73-0005

The vulnerability in gnutls is related to incorrect input of configuration data. The vulnerability can be exploited remotely...

ROS-20260625-73-0007

The vulnerability in gnutls is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260625-73-0002

The vulnerability in gnutls is related to errors in processing parameter values related to input data length. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260625-73-0011

The vulnerability in gnutls is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

ROS-20260625-73-0015

The vulnerability of the comparestrings function in the GnuTLS library is related to shortcomings in the mechanism for handling register-dependent data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

ROS-20260625-73-0004

The vulnerability in gnutls is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a remote attacker to cause service failures...

ROS-20260625-73-0013

The vulnerability of the Transport Layer Security library GnuTLS is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ROS-20260625-73-0014

The vulnerability in gnutls is related to errors in the certificate validation process. Exploitation of this vulnerability can be carried out remotely...

ROS-20260625-73-0009

The vulnerability in gnutls relates to the swapping of a pointer with an expired validity period. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

ROS-20260625-73-0001

The vulnerability of the gnutlspkcs11tokeninit function lib/pkcs11write.c in the GnuTL library is related to buffer overflows in the stack during token PKCS11 initialization. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

RHSA-2026:26409 Red Hat Security Advisory: gnutls security update

Bulletin has no description...

Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak

Summary Multiple vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak. RedHat UBI is used as base imaged for IBM Robotic Process Automation for Cloud Pak images. This bulletin identifies the fixes required to address the vulnerabilites. Vulnerability Details...

gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically for dNSName DNS or rfc822Name email constraints within excludedSubtrees or permittedSubtrees. A remote attacker can exploit this by crafting a leaf...

gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security DTLS packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This...