GnuTLS Multiple Vulnerability Advisory (CVE-2026-42014 et al.)

Vulnerability Overview This page summarizes multiple security vulnerabilities in the GnuTLS Transport Layer Security Library. Each vulnerability includes a detailed description, scope of impact, and remediation advice. Scope of Impact CVE-2026-42014: Affects clients using . CVE-2026-42013: Affects applications that check DNS hostnames during certificate validation. CVE-2026-42012: Affects applications using URI or SRV certificate subject alternative names. CVE-2026-42011: Affects applications using strict name constraints. CVE-2026-3833: Affects applications processing name constraints. CVE-2026-42010: Affects applications where the username for RSA-PSK contains NULL characters. CVE-2026-33845: Affects applications handling DTLS reassembly. CVE-2026-42009: Affects applications relying on DTLS packet ordering. CVE-2026-5419: Affects applications performing PKCS#7 padding checks. CVE-2026-3832: Affects applications verifying multi-entry OCSP responses. CVE-2026-42015: Affects applications using PKCS#12. CVE-2026-5260: Affects applications using RSA key exchange. CVE-2026-33846: Affects applications performing DTLS fragment verification. CVE-2025-14831: Affects applications verifying name constraints with pathological attributes. CVE-2026-1584: Affects TLS 1.3 renegotiation. CVE-2025-9820: Affects applications using PKCS#11 tokens. CVE-2025-6395: Affects TLS 1.3 handshakes. CVE-2025-32990: Affects applications using the utility. CVE-2025-32988: Affects applications validating certificate extensions. CVE-2025-32989: Affects X.509 certificate verification. CVE-2024-12243: Affects applications using the certificate name constraint extension. CVE-2024-28835: Affects certificate chain verification. CVE-2024-15553: Affects TLS 1.3 handshakes. CVE-2024-0567: Affects certificate chain verification. CVE-2024-28834: Affects applications using deterministic ECDSA key generation. CVE-2023-5981: Affects applications using RSA PKCS#1 v1.5 padding. CVE-2022-2509: Affects applications using . CVE-2022-0117: Affects applications using shared trust list objects. CVE-2021-20231: Affects TLS 1.3 handshakes. CVE-2020-24659: Affects applications involved in oss-fuzz testing. CVE-2023-0361: Affects RSA decryption. CVE-2020-13777: Affects TLS 1.3 session ticket key construction. CVE-2020-11501: Affects the DTLS protocol implementation. CVE-2019-3836: Affects TLS 1.3 asynchronous messages. CVE-2017-7507: Affects the Status Request TLS extension. CVE-2017-5335: Affects OpenPGP certificates. CVE-2017-5334: Affects the Proxy Certificate Information extension. CVE-2015-3308: Affects CRL distribution point formats. CVE-2014-0092: Affects certificate verification functionality. CVE-2009-2730: Affects certificate hostname verification. CVE-2008-2377: Affects client-side denial of service. CVE-2008-1948: Affects memory corruption issues. CVE-2006-0645: Affects memory corruption issues. Remediation CVE-2026-42014: Upgrade to GnuTLS 3.8.13 or later. CVE-2026-42013: Upgrade to GnuTLS 3.8.13 or later. CVE-2026-42012: Upgrade to GnuTLS 3.8.13 or later. CVE-2026-42011: Upgrade to GnuTLS 3.8.13 or later. CVE-2026-3833: Upgrade to GnuTLS 3.8.13 or later. CVE-2026-42010: Upgrade to GnuTLS 3.8.13 or later. CVE-2026-33845: Upgrade to GnuTLS 3.8.13 or later. CVE-2026-42009: Upgrade to GnuTLS 3.8.13 or later. CVE-2026-5419: Upgrade to GnuTLS 3.8.13 or later. CVE-2026-3832: Upgrade to GnuTLS 3.8.13 or later. CVE-2026-42015: Upgrade to GnuTLS 3.8.13 or later. CVE-2026-5260: Upgrade to GnuTLS 3.8.13 or later. CVE-2026-33846: Upgrade to GnuTLS 3.8.13 or later. CVE-2025-14831: Upgrade to GnuTLS 3.8.12 or later. CVE-2026-1584: Upgrade to GnuTLS 3.8.12 or later. CVE-2025-9820: Upgrade to GnuTLS 3.8.11 or later. CVE-2025-6395: Upgrade to GnuTLS 3.8.10 or later. CVE-2025-32990: Upgrade to GnuTLS 3.8.10 or later. CVE-2025-32988: Upgrade to GnuTLS 3.8.10 or later. CVE-2025-32989: Upgrade to GnuTLS 3.8.10 or later. CVE-2024-12243: Upgrade to GnuTLS 3.8.0 or later. CVE-2024-28835: Upgrade to GnuTLS 3.8.4 or later. CVE-2024-15553: Upgrade to GnuTLS 3.8.3 or later. CVE-2024-0567: Upgrade to GnuTLS 3.8.2 or later. CVE-2024-28834: Upgrade to GnuTLS 3.8.4 or later. CVE-2023-5981: Upgrade to GnuTLS 3.8.2 or later. CVE-2022-2509: Upgrade to GnuTLS 3.7.7 or later. CVE-2022-0117: Upgrade to GnuTLS 3.7.3 or later. CVE-2021-20231: Upgrade to GnuTLS 3.7.1 or later. CVE-2020-24659: Upgrade to GnuTLS 3.6.15 or later. CVE-2023-0361: Upgrade to GnuTLS 3.8.0 or later. CVE-2020-13777: Upgrade to GnuTLS 3.6.14 or later. CVE-2020-11501: Upgrade to GnuTLS 3.6.13 or later. CVE-2019-3836: Upgrade to GnuTLS 3.6.7 or later. CVE-2017-7507: Upgrade to GnuTLS 3.5.13 or later. CVE-2017-5335: Upgrade to GnuTLS 3.5.8 or later. CVE-2017-5334: Upgrade to GnuTLS 3.5.8 or later. CVE-2015-3308: Upgrade to GnuTLS 3.3.14 or later. CVE-2014-0092: Upgrade to GnuTLS 3.2.5 or later. CVE-2009-2730: Upgrade to GnuTLS 2.8.3 or later. CVE-2008-2377: Upgrade to GnuTLS 2.4.1 or later. CVE-2008-1948: Upgrade to GnuT

Goal Reached Thanks to every supporter — we hit 100%!

GnuTLS Multiple Vulnerability Advisory (CVE-2026-42014 et al.)