Read the docs
Red Hat Security Advisory

RHSA-2026:7477

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-04-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 6 records

TI-2025-24000 CVE-2025-32990 · GHSA-v8v5-8mm8-3j8p

Gnutls: vulnerability in gnutls certtool template parsing

Priority MEDIUM 43

A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00896 Published 2025-07-10 Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +8 CWE-122
TI-2025-23999 CVE-2025-32989 · GHSA-f7q5-qg45-7vm8

Gnutls: vulnerability in gnutls sct extension parsing

Priority LOW 27

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01467 Published 2025-07-10 Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +7 CWE-295
TI-2025-09008 CVE-2025-9820 · GHSA-337w-h8w7-m899

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

Priority LOW 18

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00222 Published 2026-01-26 Partial fix · 3.8.10-3.el10_1, 3.6.16-8.el8_10.5 +22 CWE-121