Red Hat Security Advisory: gnutls security, bug fix, and enhancement update

Fixed packages 15

Vulnerabilities 5

• Medium 6.5
  CVE-2025-32988

  Gnutls: vulnerability in gnutls othername san export

  A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the type-id OID is invalid or malformed, GnuTLS will call as…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Jul 10, 2025
• Medium 6.5
  CVE-2025-32990

  Gnutls: vulnerability in gnutls certtool template parsing

  A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write,…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Jul 10, 2025
• Medium 6.5
  CVE-2025-6395

  Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()

  A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Jul 10, 2025
• Medium 5.3
  CVE-2024-12243

  Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos

  A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a r…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Feb 10, 2025
• Medium 5.3
  CVE-2025-32989

  Gnutls: vulnerability in gnutls sct extension parsing

  A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Jul 10, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2344615
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2359620
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2359621
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2359622
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2376755
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17361.json
• report
  https://access.redhat.com/security/cve/CVE-2024-12243
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-12243
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-12243
• article
  https://gitlab.com/gnutls/gnutls/-/issues/1553
• article
  https://gitlab.com/gnutls/libtasn1/-/issues/52
• report
  https://access.redhat.com/security/cve/CVE-2025-6395
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-6395
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-6395
• article
  https://gitlab.com/gnutls/gnutls/-/issues/1718
• article
  https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html
• report
  https://access.redhat.com/security/cve/CVE-2025-32988
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-32988
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-32988
• report
  https://access.redhat.com/security/cve/CVE-2025-32989
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-32989
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-32989
• report
  https://access.redhat.com/security/cve/CVE-2025-32990
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-32990
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-32990