Release date:
2026-09-30 16:34:20 UTC
Description:
- Rebased onto the vendor 3.3.29-9.0.3.el7_9 sources
- CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread (TuxCare fix retained)
- CVE-2026-42014 and CVE-2026-42015 are fixed by the vendor in this build
- CVE-2026-42011 is not applicable to this baseline per the vendor assessment
- CVE-2026-33845, CVE-2026-33846, CVE-2026-3833, CVE-2026-42009, CVE-2026-42012 and CVE-2026-42013 are now fixed by the vendor; the TuxCare duplicates are dropped
- CVE-2026-3833 follow-up: the vendor's email_matches() no longer matches a
bare-domain rfc822Name against a bare-domain constraint of the same length,
which 3.3.29 did; restore that comparison, case-insensitively, and add the
assertions to tests/name-constraints.c
Updated packages:
-
gnutls-3.3.29-9.0.3.el7_9.tuxcare.els1.aarch64.rpm
sha:25dc6f70aec4cccd400d617aae3960efd1e4a2555936278762b67f941e9f9441
-
gnutls-3.3.29-9.0.3.el7_9.tuxcare.els1.i686.rpm
sha:78a4e5a8361590b7e2e6ad8830e7739ea30f596470b9a7f7e9c02235e74fea31
-
gnutls-3.3.29-9.0.3.el7_9.tuxcare.els1.x86_64.rpm
sha:ba837b75fec3d830663a7e53ea8f8a1be309399dc549ca9182379788cf6bb2a4
-
gnutls-c++-3.3.29-9.0.3.el7_9.tuxcare.els1.aarch64.rpm
sha:d2f16c9e471eab51cd64c82b8eb007b7eee73d4e83174273a0636ba770ed9dcb
-
gnutls-c++-3.3.29-9.0.3.el7_9.tuxcare.els1.i686.rpm
sha:d8a86af64de6cd8931c27b14634ac1c74418266877544a7c49168eb442edad1d
-
gnutls-c++-3.3.29-9.0.3.el7_9.tuxcare.els1.x86_64.rpm
sha:5330d2034b71e68721f8b2f67a6516e12ae0dc41dc853b9c042bf10c70c1b443
-
gnutls-dane-3.3.29-9.0.3.el7_9.tuxcare.els1.aarch64.rpm
sha:ab61d5cfbd09c787926593019955d714008308a917a4e719dd5a7596ad8b3a1f
-
gnutls-dane-3.3.29-9.0.3.el7_9.tuxcare.els1.i686.rpm
sha:cbe9e2d2627b3e485df2cf62701bcd931e6f2d2accb5efc675942aeb536b2608
-
gnutls-dane-3.3.29-9.0.3.el7_9.tuxcare.els1.x86_64.rpm
sha:72ac2ca8af6bdb2e5077d971415b78868f55c6c56934ac6b90c9012d784428c7
-
gnutls-devel-3.3.29-9.0.3.el7_9.tuxcare.els1.aarch64.rpm
sha:3421fe277a3f417222ec2e14ea0bf2bf66cbe88ec7bb378d959052b37323accf
-
gnutls-devel-3.3.29-9.0.3.el7_9.tuxcare.els1.i686.rpm
sha:309be2d07b17e91304cb214c60f058983f88addcf3ddaefcc544366363929720
-
gnutls-devel-3.3.29-9.0.3.el7_9.tuxcare.els1.x86_64.rpm
sha:05db668c50c3fe4098b196f63499ab7852481589aac5bca87a89d82a47070117
-
gnutls-utils-3.3.29-9.0.3.el7_9.tuxcare.els1.aarch64.rpm
sha:c791b40ec9d43788de67c4540c36a15823f45a2895a2661c9df7c529dc78debb
-
gnutls-utils-3.3.29-9.0.3.el7_9.tuxcare.els1.i686.rpm
sha:29d577e4fdabaeaaf446c40286ed67037861fd187313d85149309cbdb8de649c
-
gnutls-utils-3.3.29-9.0.3.el7_9.tuxcare.els1.x86_64.rpm
sha:f700a05c804aa1be6d7c03aec8a65b8bba26fdf23c1cff14c653a374d0580c30
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
