RLSA-2025:16115

Описание

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

• gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)

• gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989)

• gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)

• gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)

Bug Fix(es) and Enhancement(s):

• gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620)

• gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621)

• gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622)

• gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.