Bug 2548190 (CVE-2026-67693) - CVE-2026-67693 gnutls: gnutls: Information disclosure via contradictory Key Usage and Extended Key Usage extensions
Summary: CVE-2026-67693 gnutls: gnutls: Information disclosure via contradictory Key U...
Keywords:
Status: NEW
Alias: CVE-2026-67693
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-10-08 19:04 UTC by OSIDB Bzimport
Modified: 2026-10-08 19:12 UTC (History)
17 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-10-08 19:04:59 UTC 
An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) and Extended Key Usage (EKU)
Note You need to log in before you can comment on or make changes to this bug.