Skip to content
OpenAdvisories
Medium ALSA-2022:7105 1 CVE

Moderate: gnutls security update

Published Oct 25, 2022 · Updated Oct 29, 2026

Summary

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: Double free during gnutls_pkcs7_verify. (CVE-2022-2509)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 5

ReleasePackageFixed in
AlmaLinux · 8 gnutls 3.6.16-5.el8_6
AlmaLinux · 8 gnutls-c++ 3.6.16-5.el8_6
AlmaLinux · 8 gnutls-dane 3.6.16-5.el8_6
AlmaLinux · 8 gnutls-devel 3.6.16-5.el8_6
AlmaLinux · 8 gnutls-utils 3.6.16-5.el8_6

Vulnerabilities 1

References

  • report
    https://access.redhat.com/security/cve/CVE-2022-2509
  • report
    https://bugzilla.redhat.com/2108977
  • advisory
    https://errata.almalinux.org/8/ALSA-2022-7105.html