Red Hat Security AdvisoryRHSA-2025:17361
gnutls security, bug fix, and enhancement update
Released 2025-10-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.2) gnutls-c++-3.7.6-21.el9_2.4, gnutls-dane-3.7.6-21.el9_2.4, gnutls-devel-3.7.6-21.el9_2.4 +1
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) gnutls-3.7.6-21.el9_2.4
Fixes 5 records
Priority MEDIUM 43
A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00896 · Published 2025-07-10 · Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +8 CWE-122
Priority LOW 39
A flaw was found in GnuTLS.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.01475 · Published 2025-07-10 · Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +8 CWE-415
Priority LOW 33
A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01292 · Published 2025-02-10 · Partial fix · 3.8.8, 3.8.9 +6 CWE-407
Priority LOW 30
A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00771 · Published 2025-07-10 · Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +7 CWE-476
Priority LOW 27
A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01467 · Published 2025-07-10 · Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +7 CWE-295
THREATIST.IORead the docs