An update for gnutls is now available for openEuler-20.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-2331 Final 1.0 1.0 2026-05-15 Initial 2026-05-15 2026-05-15 openEuler SA Tool V1.0 2026-05-15 gnutls security update An update for gnutls is now available for openEuler-20.03-LTS-SP4 GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, and other required structures. The project strives to provide a secure communications back-end, simple to use and integrated with the rest of the base Linux libraries. A back-end designed to work and be secure out of the box, keeping the complexity of TLS and PKI out of application code. Security Fix(es): A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing the implementation to allocate a buffer based on a smaller initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because the merge operation does not enforce proper bounds checking against the allocated buffer size, this results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path and can lead to application crashes or potential memory corruption.(CVE-2026-33846) An update for gnutls is now available for openEuler-20.03-LTS-SP4. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High gnutls https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2331 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-33846 https://nvd.nist.gov/vuln/detail/CVE-2026-33846 openEuler-20.03-LTS-SP4 gnutls-3.6.14-21.oe2003sp4.aarch64.rpm gnutls-debuginfo-3.6.14-21.oe2003sp4.aarch64.rpm gnutls-debugsource-3.6.14-21.oe2003sp4.aarch64.rpm gnutls-devel-3.6.14-21.oe2003sp4.aarch64.rpm gnutls-utils-3.6.14-21.oe2003sp4.aarch64.rpm gnutls-3.6.14-21.oe2003sp4.src.rpm gnutls-3.6.14-21.oe2003sp4.x86_64.rpm gnutls-debuginfo-3.6.14-21.oe2003sp4.x86_64.rpm gnutls-debugsource-3.6.14-21.oe2003sp4.x86_64.rpm gnutls-devel-3.6.14-21.oe2003sp4.x86_64.rpm gnutls-utils-3.6.14-21.oe2003sp4.x86_64.rpm gnutls-help-3.6.14-21.oe2003sp4.noarch.rpm A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing the implementation to allocate a buffer based on a smaller initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because the merge operation does not enforce proper bounds checking against the allocated buffer size, this results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path and can lead to application crashes or potential memory corruption. 2026-05-15 CVE-2026-33846 openEuler-20.03-LTS-SP4 High 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H gnutls security update 2026-05-15 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2331