A TLS protocol implementation
Go to file
Alexander Sosedkin a9ca5bdc28 Fix 3.8.13 CVEs and security issues
- Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)
- Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)
- Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)
- Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)
- Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)
- Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)
- Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)
- Fix upstream security issue #1808 (PSK rehandshake)
- Fix upstream security issue #1810 (EKU OID prefix match)
- Fix upstream security issue #1818 (RSA correctness, OpenSSL format import)
- Fix upstream security issue #1819 (PKCS#11 trust removal error path)
- Fix upstream security issue #1817 (session parameter loading robustness)

Resolves: RHEL-154320
Resolves: RHEL-159046
Resolves: RHEL-149713
2026-05-04 14:41:25 +02:00
.fmf Switch to OSCI 2025-06-26 14:50:20 +02:00
plans Switch to OSCI (fixup) 2025-06-27 09:37:31 +02:00
.gitignore Auto sync2gitlab import of gnutls-3.6.16-6.el8_7.src.rpm 2023-03-16 02:11:32 +00:00
ci.fmf Switch to OSCI 2025-06-26 14:50:20 +02:00
gating.yaml Switch to OSCI (fixup) 2025-06-27 09:37:31 +02:00
gnutls-3.2.7-rpath.patch Auto sync2gitlab import of gnutls-3.6.16-4.el8.src.rpm 2022-05-26 07:51:32 -04:00
gnutls-3.6.4-no-now-guile.patch Auto sync2gitlab import of gnutls-3.6.16-4.el8.src.rpm 2022-05-26 07:51:32 -04:00
gnutls-3.6.13-enable-intel-cet.patch Auto sync2gitlab import of gnutls-3.6.16-4.el8.src.rpm 2022-05-26 07:51:32 -04:00
gnutls-3.6.14-fips-dh-selftests.patch Auto sync2gitlab import of gnutls-3.6.16-4.el8.src.rpm 2022-05-26 07:51:32 -04:00
gnutls-3.6.14-fips-kdf-selftests.patch Auto sync2gitlab import of gnutls-3.6.16-4.el8.src.rpm 2022-05-26 07:51:32 -04:00
gnutls-3.6.16-1808-psk-rehandshake.patch Fix 3.8.13 CVEs and security issues 2026-05-04 14:41:25 +02:00
gnutls-3.6.16-1810-ocsp-truncated-eku.patch Fix 3.8.13 CVEs and security issues 2026-05-04 14:41:25 +02:00
gnutls-3.6.16-1817-security-parameters.patch Fix 3.8.13 CVEs and security issues 2026-05-04 14:41:25 +02:00
gnutls-3.6.16-1818-pem-parsing.patch Fix 3.8.13 CVEs and security issues 2026-05-04 14:41:25 +02:00
gnutls-3.6.16-1818-rsa-coprime.patch Fix 3.8.13 CVEs and security issues 2026-05-04 14:41:25 +02:00
gnutls-3.6.16-1819-dblfree-mid-import.patch Fix 3.8.13 CVEs and security issues 2026-05-04 14:41:25 +02:00
gnutls-3.6.16-cpuid.patch Auto sync2gitlab import of gnutls-3.6.16-6.el8.src.rpm 2023-01-13 08:09:52 +00:00
gnutls-3.6.16-cve-2025-6395.patch Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990 2025-09-08 14:56:55 +02:00
gnutls-3.6.16-cve-2025-32988.patch Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990 2025-09-08 14:56:55 +02:00
gnutls-3.6.16-cve-2025-32990.patch Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990 2025-09-08 14:56:55 +02:00
gnutls-3.6.16-CVE-2025-9820.patch Backport the fixes for CVE-2025-9820 and CVE‑2025‑14831 2026-02-12 12:51:45 +01:00
gnutls-3.6.16-CVE-2025-14831.patch Backport the fixes for CVE-2025-9820 and CVE‑2025‑14831 2026-02-12 12:51:45 +01:00
gnutls-3.6.16-CVE-2026-3833-nc-case.patch Fix 3.8.13 CVEs and security issues 2026-05-04 14:41:25 +02:00
gnutls-3.6.16-CVE-2026-5260-p11-rsa-overread.patch Fix 3.8.13 CVEs and security issues 2026-05-04 14:41:25 +02:00
gnutls-3.6.16-CVE-2026-33845-dtls-uflow.patch Fix 3.8.13 CVEs and security issues 2026-05-04 14:41:25 +02:00
gnutls-3.6.16-CVE-2026-33846-dtls-len.patch Fix 3.8.13 CVEs and security issues 2026-05-04 14:41:25 +02:00
gnutls-3.6.16-CVE-2026-42009-dtls-qsort.patch Fix 3.8.13 CVEs and security issues 2026-05-04 14:41:25 +02:00
gnutls-3.6.16-CVE-2026-42010-psk-nul.patch Fix 3.8.13 CVEs and security issues 2026-05-04 14:41:25 +02:00
gnutls-3.6.16-CVE-2026-42011-nc-intersect.patch Fix 3.8.13 CVEs and security issues 2026-05-04 14:41:25 +02:00
gnutls-3.6.16-CVE-2026-42012-url-san-cn.patch Fix 3.8.13 CVEs and security issues 2026-05-04 14:41:25 +02:00
gnutls-3.6.16-CVE-2026-42013-oversized-san.patch Fix 3.8.13 CVEs and security issues 2026-05-04 14:41:25 +02:00
gnutls-3.6.16-CVE-2026-42014-so-pin-uaf.patch Fix 3.8.13 CVEs and security issues 2026-05-04 14:41:25 +02:00
gnutls-3.6.16-CVE-2026-42015-p12-bag32.patch Fix 3.8.13 CVEs and security issues 2026-05-04 14:41:25 +02:00
gnutls-3.6.16-deterministic-ecdsa-fixes.patch Fix timing side-channel in deterministic ECDSA 2024-05-02 15:51:49 +09:00
gnutls-3.6.16-doc-p11tool-ckaid.patch Auto sync2gitlab import of gnutls-3.6.16-4.el8.src.rpm 2022-05-26 07:51:32 -04:00
gnutls-3.6.16-pkcs7-verify.patch Auto sync2gitlab import of gnutls-3.6.16-5.el8_6.src.rpm 2022-09-02 12:12:03 +00:00
gnutls-3.6.16-rehandshake-tickets.patch Clear server's session ticket indication at rehandshake 2023-06-26 09:31:27 +02:00
gnutls-3.6.16-rsa-psk-timing-followup.patch auth/rsa-psk: minimize branching after decryption 2024-01-22 14:32:10 +09:00
gnutls-3.6.16-rsa-psk-timing.patch auth/rsa_psk: side-step potential side-channel 2023-12-07 11:52:53 +09:00
gnutls-3.6.16-tls12-cert-type.patch Auto sync2gitlab import of gnutls-3.6.16-4.el8.src.rpm 2022-05-26 07:51:32 -04:00
gnutls-3.6.16-trust-ca-sha1.patch Auto sync2gitlab import of gnutls-3.6.16-4.el8.src.rpm 2022-05-26 07:51:32 -04:00
gnutls-3.7.8-rsa-kx-timing.patch Auto sync2gitlab import of gnutls-3.6.16-6.el8_7.src.rpm 2023-03-16 02:11:32 +00:00
gnutls-3.8.9-CVE-2024-12243.patch Backport the fix for CVE-2024-12243 2025-04-01 11:03:16 +02:00
gnutls.spec Fix 3.8.13 CVEs and security issues 2026-05-04 14:41:25 +02:00
sources Auto sync2gitlab import of gnutls-3.6.16-6.el8_7.src.rpm 2023-03-16 02:11:32 +00:00