mod_gnutls -- multiple vulnerabilities

2026-08-24 · CVE-2026-33307, CVE-2026-33308 · VuXML entry

The mod_gnutls project reports: Security fix (CVE-2026-33307): Fix out-of-bounds write when receiving a client certificate chain longer than the buffer. Security fix (CVE-2026-33308): Check Key Purpose during client certificate verification.

Affected versions

• ap24-mod_gnutls < 0.13.0

By system

1 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.