Red Hat Security Advisory

RHSA-2026:5585

gnutls security update

Released 2026-03-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) gnutls-c++-3.6.16-8.el8_10.5, gnutls-dane-3.6.16-8.el8_10.5, gnutls-devel-3.6.16-8.el8_10.5 +1
Red Hat Enterprise Linux BaseOS (v. 8) gnutls-3.6.16-8.el8_10.5

TI-2025-13528 CVE-2025-14831 · GHSA-pm8w-jq9r-x5rp

LOW 31

A flaw was found in GnuTLS.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00656 Published 2026-02-09 Partial fix · 3.8.10-3.el10_1, 3.8.9-9.el10_0.17 +40 CWE-407

TI-2025-09008 CVE-2025-9820 · GHSA-337w-h8w7-m899

LOW 18

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00222 Published 2026-01-26 Partial fix · 3.8.10-3.el10_1, 3.6.16-8.el8_10.5 +22 CWE-121