{
  "document": {
    "aggregate_severity": {
      "text": "High"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "TuxCare License Agreement",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://tuxcare.com/contact/",
      "name": "TuxCare",
      "namespace": "https://tuxcare.com/"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.tuxcare.com/csaf/v2/els_os/centos6els/vex/2026/cve-2026-42011-els_os-centos6els.json"
      }
    ],
    "tracking": {
      "current_release_date": "2026-10-15T20:35:23Z",
      "generator": {
        "date": "2026-10-15T20:35:23Z",
        "engine": {
          "name": "pyCSAF"
        }
      },
      "id": "CVE-2026-42011-ELS_OS-CENTOS6ELS",
      "initial_release_date": "2026-05-07T15:16:00Z",
      "revision_history": [
        {
          "date": "2026-05-07T15:16:00Z",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-15T08:59:07Z",
          "number": "2",
          "summary": "Official Publication"
        },
        {
          "date": "2026-09-30T15:03:01Z",
          "number": "3",
          "summary": "Update document"
        },
        {
          "date": "2026-10-03T12:44:03Z",
          "number": "4",
          "summary": "Update document"
        },
        {
          "date": "2026-10-15T17:24:15Z",
          "number": "5",
          "summary": "Update document"
        },
        {
          "date": "2026-10-15T20:35:23Z",
          "number": "6",
          "summary": "Update document"
        }
      ],
      "status": "final",
      "version": "6"
    },
    "title": "Security update on CVE-2026-42011"
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Community Enterprise Operating System 6",
                "product": {
                  "name": "Community Enterprise Operating System 6",
                  "product_id": "CentOS-6",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:centos:centos:6:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Community Enterprise Operating System"
          }
        ],
        "category": "vendor",
        "name": "Red Hat, Inc."
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gnutls-devel-0:2.12.23-22.el6.tuxcare.els1.i686",
                "product": {
                  "name": "gnutls-devel-0:2.12.23-22.el6.tuxcare.els1.i686",
                  "product_id": "gnutls-devel-0:2.12.23-22.el6.tuxcare.els1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/gnutls-devel@2.12.23-22.el6.tuxcare.els1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gnutls-guile-0:2.12.23-22.el6.tuxcare.els1.i686",
                "product": {
                  "name": "gnutls-guile-0:2.12.23-22.el6.tuxcare.els1.i686",
                  "product_id": "gnutls-guile-0:2.12.23-22.el6.tuxcare.els1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/gnutls-guile@2.12.23-22.el6.tuxcare.els1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gnutls-0:2.12.23-22.el6.tuxcare.els1.i686",
                "product": {
                  "name": "gnutls-0:2.12.23-22.el6.tuxcare.els1.i686",
                  "product_id": "gnutls-0:2.12.23-22.el6.tuxcare.els1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/gnutls@2.12.23-22.el6.tuxcare.els1?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gnutls-devel-0:2.12.23-22.el6.tuxcare.els1.x86_64",
                "product": {
                  "name": "gnutls-devel-0:2.12.23-22.el6.tuxcare.els1.x86_64",
                  "product_id": "gnutls-devel-0:2.12.23-22.el6.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/gnutls-devel@2.12.23-22.el6.tuxcare.els1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gnutls-guile-0:2.12.23-22.el6.tuxcare.els1.x86_64",
                "product": {
                  "name": "gnutls-guile-0:2.12.23-22.el6.tuxcare.els1.x86_64",
                  "product_id": "gnutls-guile-0:2.12.23-22.el6.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/gnutls-guile@2.12.23-22.el6.tuxcare.els1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gnutls-utils-0:2.12.23-22.el6.tuxcare.els1.x86_64",
                "product": {
                  "name": "gnutls-utils-0:2.12.23-22.el6.tuxcare.els1.x86_64",
                  "product_id": "gnutls-utils-0:2.12.23-22.el6.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/gnutls-utils@2.12.23-22.el6.tuxcare.els1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gnutls-0:2.12.23-22.el6.tuxcare.els1.x86_64",
                "product": {
                  "name": "gnutls-0:2.12.23-22.el6.tuxcare.els1.x86_64",
                  "product_id": "gnutls-0:2.12.23-22.el6.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/gnutls@2.12.23-22.el6.tuxcare.els1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "CloudLinux"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-devel-0:2.12.23-22.el6.tuxcare.els1.i686 as a component of Community Enterprise Operating System 6",
          "product_id": "CentOS-6:gnutls-devel-0:2.12.23-22.el6.tuxcare.els1.i686"
        },
        "product_reference": "gnutls-devel-0:2.12.23-22.el6.tuxcare.els1.i686",
        "relates_to_product_reference": "CentOS-6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-devel-0:2.12.23-22.el6.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 6",
          "product_id": "CentOS-6:gnutls-devel-0:2.12.23-22.el6.tuxcare.els1.x86_64"
        },
        "product_reference": "gnutls-devel-0:2.12.23-22.el6.tuxcare.els1.x86_64",
        "relates_to_product_reference": "CentOS-6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-guile-0:2.12.23-22.el6.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 6",
          "product_id": "CentOS-6:gnutls-guile-0:2.12.23-22.el6.tuxcare.els1.x86_64"
        },
        "product_reference": "gnutls-guile-0:2.12.23-22.el6.tuxcare.els1.x86_64",
        "relates_to_product_reference": "CentOS-6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-guile-0:2.12.23-22.el6.tuxcare.els1.i686 as a component of Community Enterprise Operating System 6",
          "product_id": "CentOS-6:gnutls-guile-0:2.12.23-22.el6.tuxcare.els1.i686"
        },
        "product_reference": "gnutls-guile-0:2.12.23-22.el6.tuxcare.els1.i686",
        "relates_to_product_reference": "CentOS-6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-utils-0:2.12.23-22.el6.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 6",
          "product_id": "CentOS-6:gnutls-utils-0:2.12.23-22.el6.tuxcare.els1.x86_64"
        },
        "product_reference": "gnutls-utils-0:2.12.23-22.el6.tuxcare.els1.x86_64",
        "relates_to_product_reference": "CentOS-6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-0:2.12.23-22.el6.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 6",
          "product_id": "CentOS-6:gnutls-0:2.12.23-22.el6.tuxcare.els1.x86_64"
        },
        "product_reference": "gnutls-0:2.12.23-22.el6.tuxcare.els1.x86_64",
        "relates_to_product_reference": "CentOS-6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-0:2.12.23-22.el6.tuxcare.els1.i686 as a component of Community Enterprise Operating System 6",
          "product_id": "CentOS-6:gnutls-0:2.12.23-22.el6.tuxcare.els1.i686"
        },
        "product_reference": "gnutls-0:2.12.23-22.el6.tuxcare.els1.i686",
        "relates_to_product_reference": "CentOS-6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-42011",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "TuxCare has assessed that this vulnerability does not impact any currently supported TuxCare products. This evaluation may change as new information becomes available. For additional details regarding this vulnerability and affected products, refer to the provided references.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "known_not_affected": [
          "CentOS-6:gnutls-0:2.12.23-22.el6.tuxcare.els1.i686",
          "CentOS-6:gnutls-0:2.12.23-22.el6.tuxcare.els1.x86_64",
          "CentOS-6:gnutls-devel-0:2.12.23-22.el6.tuxcare.els1.i686",
          "CentOS-6:gnutls-devel-0:2.12.23-22.el6.tuxcare.els1.x86_64",
          "CentOS-6:gnutls-guile-0:2.12.23-22.el6.tuxcare.els1.i686",
          "CentOS-6:gnutls-guile-0:2.12.23-22.el6.tuxcare.els1.x86_64",
          "CentOS-6:gnutls-utils-0:2.12.23-22.el6.tuxcare.els1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-42011"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:13274",
          "url": "https://access.redhat.com/errata/RHSA-2026:13274"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:20611",
          "url": "https://access.redhat.com/errata/RHSA-2026:20611"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:20612",
          "url": "https://access.redhat.com/errata/RHSA-2026:20612"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:20613",
          "url": "https://access.redhat.com/errata/RHSA-2026:20613"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26319",
          "url": "https://access.redhat.com/errata/RHSA-2026:26319"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26409",
          "url": "https://access.redhat.com/errata/RHSA-2026:26409"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:29197",
          "url": "https://access.redhat.com/errata/RHSA-2026:29197"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:30004",
          "url": "https://access.redhat.com/errata/RHSA-2026:30004"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:30849",
          "url": "https://access.redhat.com/errata/RHSA-2026:30849"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:30850",
          "url": "https://access.redhat.com/errata/RHSA-2026:30850"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:32962",
          "url": "https://access.redhat.com/errata/RHSA-2026:32962"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:33125",
          "url": "https://access.redhat.com/errata/RHSA-2026:33125"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:40762",
          "url": "https://access.redhat.com/errata/RHSA-2026:40762"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:41921",
          "url": "https://access.redhat.com/errata/RHSA-2026:41921"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:43575",
          "url": "https://access.redhat.com/errata/RHSA-2026:43575"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:56853",
          "url": "https://access.redhat.com/errata/RHSA-2026:56853"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:57483",
          "url": "https://access.redhat.com/errata/RHSA-2026:57483"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:58981",
          "url": "https://access.redhat.com/errata/RHSA-2026:58981"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:59831",
          "url": "https://access.redhat.com/errata/RHSA-2026:59831"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:60019",
          "url": "https://access.redhat.com/errata/RHSA-2026:60019"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-42011",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42011"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2467437",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467437"
        },
        {
          "category": "external",
          "summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-6",
          "url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-6"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:72502",
          "url": "https://access.redhat.com/errata/RHSA-2026:72502"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:74674",
          "url": "https://access.redhat.com/errata/RHSA-2026:74674"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:82304",
          "url": "https://access.redhat.com/errata/RHSA-2026:82304"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:82322",
          "url": "https://access.redhat.com/errata/RHSA-2026:82322"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:82347",
          "url": "https://access.redhat.com/errata/RHSA-2026:82347"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:82354",
          "url": "https://access.redhat.com/errata/RHSA-2026:82354"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:82372",
          "url": "https://access.redhat.com/errata/RHSA-2026:82372"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:82857",
          "url": "https://access.redhat.com/errata/RHSA-2026:82857"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:82888",
          "url": "https://access.redhat.com/errata/RHSA-2026:82888"
        }
      ],
      "release_date": "2026-05-07T15:16:00Z",
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        },
        {
          "category": "impact",
          "date": "2026-10-15T17:53:09.759257Z",
          "details": "The gnutls package for CentOS 6 ELS is not affected by CVE-2026-42011. The shipped GnuTLS 2.12.23 does not implement RFC 5280 name-constraints handling at all, so the vulnerable name-constraint intersection logic introduced in later GnuTLS 3.x releases is not present and the affected code path cannot be reached.",
          "product_ids": [
            "CentOS-6:gnutls-0:2.12.23-22.el6.tuxcare.els1.i686",
            "CentOS-6:gnutls-0:2.12.23-22.el6.tuxcare.els1.x86_64",
            "CentOS-6:gnutls-devel-0:2.12.23-22.el6.tuxcare.els1.i686",
            "CentOS-6:gnutls-devel-0:2.12.23-22.el6.tuxcare.els1.x86_64",
            "CentOS-6:gnutls-guile-0:2.12.23-22.el6.tuxcare.els1.i686",
            "CentOS-6:gnutls-guile-0:2.12.23-22.el6.tuxcare.els1.x86_64",
            "CentOS-6:gnutls-utils-0:2.12.23-22.el6.tuxcare.els1.x86_64"
          ]
        }
      ]
    }
  ]
}