ELSA-2026-50149

Опубликовано: 12 мар. 2026

Источник: oracle-oval

Платформа: Oracle Linux 9

Описание

ELSA-2026-50149: gnutls security update (MODERATE)

[3.8.3-10_fips]

Add FIPS package change: add fips suffix to Release and set Epoch to 10 [Orabug: 35925409]
Update FIPS module name for Oracle Linux [Orabug: 35925409]

[3.8.3-10]

Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
Fix name constraint processing performance issue (CVE-2025-14831)

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

gnutls

3.8.3-10.el9_7_fips

gnutls-c++

3.8.3-10.el9_7_fips

gnutls-dane

3.8.3-10.el9_7_fips

gnutls-devel

3.8.3-10.el9_7_fips

gnutls-utils

3.8.3-10.el9_7_fips

Oracle Linux x86_64

gnutls

3.8.3-10.el9_7_fips

gnutls-c++

3.8.3-10.el9_7_fips

gnutls-dane

3.8.3-10.el9_7_fips

gnutls-devel

3.8.3-10.el9_7_fips

gnutls-utils

3.8.3-10.el9_7_fips

Связанные CVE

CVE-2025-14831

CVE-2025-9820

Ссылки на источники

Связанные уязвимости

RLSA-2026:4188

rocky

20 дней назад

Moderate: gnutls security update

RLSA-2026:3477

rocky

26 дней назад

Moderate: gnutls security update

ELSA-2026-4188

oracle-oval

20 дней назад

ELSA-2026-4188: gnutls security update (MODERATE)

ELSA-2026-3477

oracle-oval

29 дней назад

ELSA-2026-3477: gnutls security update (MODERATE)

CVE-2025-14831

CVSS3: 5.3

ubuntu

около 2 месяцев назад

A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).