Debian/gnutls28: high 8.2
A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the Common Name (CN) field
Action: Upgrade gnutls28 to 3.8.9-3+deb13u4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.8.9-3+deb13u4 | - |
Fixed versions
| 3.8.9-3+deb13u4 |
Sources
- osv: DEBIAN-CVE-2026-42013#Debian:13/gnutls28
- https://security-tracker.debian.org/tracker/CVE-2026-42013
published · modified · JSON