REDHAT-BUG-2467441: Medium severity GnuTLS libgnutls vulnerability
Published May 6, 2026
·Updated
libgnutls: Suppress CN fallback in presence of URI and SRV SAN Certificates containing URI or SRV Subject Alternative Names no longer fall back to checking DNS hostnames against Common Name to avoid potential misuse of such certificates beyond their original purpose.
Affected Software
1 affected component
GnuTLS libgnutls
Event History
May 6, 2026
Data Sourced
via Red Hat·07:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2467441?
The severity of REDHAT-BUG-2467441 is classified as medium.
2
How do I fix REDHAT-BUG-2467441?
To fix REDHAT-BUG-2467441, ensure that you are using the latest version of the GnuTLS library that incorporates the necessary updates.
3
What does REDHAT-BUG-2467441 address?
REDHAT-BUG-2467441 addresses the need to suppress Common Name (CN) fallback for certificates with URI and SRV Subject Alternative Names.
4
Which software is affected by REDHAT-BUG-2467441?
The software affected by REDHAT-BUG-2467441 is the GnuTLS library, specifically libgnutls.
5
When was REDHAT-BUG-2467441 published?
REDHAT-BUG-2467441 was published on May 6, 2026.