Read the docs
Red Hat Security Advisory

RHSA-2025:19088

A Subscription Management tool for finding and reporting Red Hat product usage

Released 2025-10-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 6 records

Priority MEDIUM 43

A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00896 Published 2025-07-10 Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +8 CWE-122
Priority LOW 27

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01467 Published 2025-07-10 Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +7 CWE-295