Ubuntu 26.04 GnuTLS Important Denial Of Service USN-8284

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in GnuTLS. Software Description: - gnutls28: GNU TLS library Details: Joshua Rogers discovered that GnuTLS did not properly handle malformed DTLS handshake fragments in certain cases. A remote attacker could possibly use this issue to obtain sensitive information, or cause a denial of service. (CVE-2026-33845) Haruto Kimura, Oscar Reparaz, and Zou Dikai discovered that GnuTLS did not properly validate DTLS handshake fragment lengths in certain cases. A remote attacker could possibly use this issue to cause GnuTLS to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-33846) Oleh Konko and Joshua Rogers discovered that GnuTLS did not properly validate OCSP responses in certain cases. A remote attacker could possibly use this issue to bypass certificate revocation ch...

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS libgnutls30t64 3.8.12-2ubuntu1.1 Ubuntu 25.10 libgnutls30t64 3.8.9-3ubuntu2.2 Ubuntu 24.04 LTS libgnutls30t64 3.8.3-1.1ubuntu3.6 Ubuntu 22.04 LTS libgnutls30 3.7.3-4ubuntu1.9 In general, a standard system update will make all the necessary changes.

CVE-2026-33845, CVE-2026-33846, CVE-2026-3832, CVE-2026-3833,

CVE-2026-42009, CVE-2026-42010, CVE-2026-42011, CVE-2026-42012,

CVE-2026-42013, CVE-2026-42014, CVE-2026-42015, CVE-2026-5260,

Ubuntu Security Notice USN-8284-1

Get the latest Linux and open source security news straight to your inbox.