[ALSA-2025:17415] Moderate: gnutls security, bug fix, and enhancement update
Type:
security
Severity:
moderate
Release date:
2025-10-08
Description:
The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990) * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988) * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395) Bug Fix(es) and Enhancement(s): * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620) * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622) * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 gnutls-3.6.16-8.el8_10.4.aarch64.rpm 0786a9be161c1022d47365314652ce5be09272ea65b88c374af5356fa602ecbc
aarch64 gnutls-devel-3.6.16-8.el8_10.4.aarch64.rpm 0fd0ec3ad23d6db91fead01571434f50105f195618a98ad0fdbc18ffe563c0eb
aarch64 gnutls-dane-3.6.16-8.el8_10.4.aarch64.rpm 31c100ef4ffeb9594984e14ba43f6bf3d95bbe2db00fc09bbf938215ffeb9d8a
aarch64 gnutls-c++-3.6.16-8.el8_10.4.aarch64.rpm 63a3251670d49542d43a43ac189c39a6d08bc0eb5e14196317d33eb1bd5915b9
aarch64 gnutls-utils-3.6.16-8.el8_10.4.aarch64.rpm a297d11e32ce615b34b298fedf78f1e64d8031d83cae5fefdb351fb5a1f8604a
i686 gnutls-c++-3.6.16-8.el8_10.4.i686.rpm 73d672d4988d6100a98f4bf5bbb5fa53f6888ea4ac0019854eb53da03b8d67a5
i686 gnutls-devel-3.6.16-8.el8_10.4.i686.rpm 93ffb8accea7be4c02b10b4233bf5c55ae6b2e867714729bf4fd50f433a2a039
i686 gnutls-dane-3.6.16-8.el8_10.4.i686.rpm f60d805cd99c245d3715c2cb3a0e28a1d9272b40fefbdbe8117055399b96abcb
ppc64le gnutls-c++-3.6.16-8.el8_10.4.ppc64le.rpm 504c41d3a2dc9aaaa271c4d87068c64a830180b9dc8569203c4fb1a34c2fe69b
ppc64le gnutls-devel-3.6.16-8.el8_10.4.ppc64le.rpm 82bcb1a43128d905286054a2dafbb9fe31bf4e895389192be4d21b6ccb510c11
ppc64le gnutls-utils-3.6.16-8.el8_10.4.ppc64le.rpm c26555802d1f295988a3b1487300bdc63b92ce1b2563617ebc01250371c0e55f
ppc64le gnutls-dane-3.6.16-8.el8_10.4.ppc64le.rpm f8072064476443bc31e12dffe37f16bd404cc42892884674d768b56bc90c6b99
x86_64 gnutls-utils-3.6.16-8.el8_10.4.x86_64.rpm 1cd9738f51c2956c2e31ebd0d8118b62ff98edaa8b320b87d5b24a224f3204d4
x86_64 gnutls-devel-3.6.16-8.el8_10.4.x86_64.rpm 2337ae6cba3d2e7df92205546f32833fa7e2730e4f02ac409b81eeb6ebb635c9
x86_64 gnutls-dane-3.6.16-8.el8_10.4.x86_64.rpm 7074cf6ddd485c94d20ec434fbbeef11a721a28c783291319c555e4f54f0984d
x86_64 gnutls-c++-3.6.16-8.el8_10.4.x86_64.rpm 8f72bea6575ed546341f74245bbedb2d05d0f97bd9a6b2e11788df54a538753c
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.