Threats tagged 'ghsa-568w-37qx-3qc6'

CVE-2026-42011 is a vulnerability in the GnuTLS library where permitted name constraints were incorrectly ignored if previous Certificate Authorities only had excluded name constraints. This flaw allows a remote attacker to bypass critical name constraint checks during certificate validation, potentially leading to acceptance of invalid certificates. Such acceptance could enable spoofing or man-in-the-middle attacks. Red Hat has issued a security advisory with a fix for this vulnerability in their Extended Life Cycle Support 7 packages.