Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:4323-1

Опубликовано: 08 дек. 2025
Источник: suse-cvrf

Описание

Security update for gnutls

This update for gnutls fixes the following issues:

  • CVE-2025-9820: Fixed buffer overflow in gnutls_pkcs11_token_init. (bsc#1254132)

Список пакетов

Container bci/spack:0.23
libgnutls30-3.8.3-150600.4.12.1
Container containers/open-webui:0
libgnutls30-3.8.3-150600.4.12.1
Container containers/vllm-openai:0
libgnutls30-3.8.3-150600.4.12.1
Container suse/manager/5.0/x86_64/server:latest
libgnutls30-3.8.3-150600.4.12.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-Azure-3P
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-Azure-Basic
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-Azure-Standard
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-BYOS
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-BYOS-Azure
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-BYOS-EC2
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-BYOS-GCE
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-CHOST-BYOS
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-CHOST-BYOS-Aliyun
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-CHOST-BYOS-Azure
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-CHOST-BYOS-EC2
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-CHOST-BYOS-GCE
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-CHOST-BYOS-GDC
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-CHOST-BYOS-SAP-CCloud
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-EC2
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-EC2-ECS-HVM
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-GCE
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-HPC
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-HPC-Azure
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-HPC-BYOS
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-HPC-BYOS-Azure
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-HPC-BYOS-EC2
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-HPC-BYOS-GCE
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-HPC-EC2
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-HPC-GCE
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-Hardened-BYOS
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-Hardened-BYOS-Azure
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-Hardened-BYOS-EC2
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-Hardened-BYOS-GCE
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-Azure
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-Azure-3P
gnutls-3.8.3-150600.4.12.1
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-Azure-LI-BYOS
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-Azure-LI-BYOS-Production
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-BYOS
gnutls-3.8.3-150600.4.12.1
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-BYOS-Azure
gnutls-3.8.3-150600.4.12.1
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-BYOS-EC2
gnutls-3.8.3-150600.4.12.1
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-BYOS-GCE
gnutls-3.8.3-150600.4.12.1
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-EC2
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-GCE
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-Hardened
gnutls-3.8.3-150600.4.12.1
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-Hardened-Azure
gnutls-3.8.3-150600.4.12.1
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-Hardened-BYOS
gnutls-3.8.3-150600.4.12.1
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
gnutls-3.8.3-150600.4.12.1
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
gnutls-3.8.3-150600.4.12.1
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
gnutls-3.8.3-150600.4.12.1
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-Hardened-EC2
gnutls-3.8.3-150600.4.12.1
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAP-Hardened-GCE
gnutls-3.8.3-150600.4.12.1
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAPCAL
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAPCAL-Azure
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAPCAL-EC2
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP6-SAPCAL-GCE
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-Azure-3P
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-Azure-Basic
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-Azure-Standard
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-BYOS-Azure
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-BYOS-EC2
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-BYOS-GCE
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-CHOST-BYOS-Aliyun
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-CHOST-BYOS-Azure
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-CHOST-BYOS-EC2
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-CHOST-BYOS-GCE
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-CHOST-BYOS-GDC
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-CHOST-BYOS-SAP-CCloud
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-EC2
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-EC2-ECS-HVM
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-GCE
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-GCE-3P
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-HPC-Azure
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-HPC-BYOS-Azure
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-HPC-BYOS-EC2
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-HPC-BYOS-GCE
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-Hardened-BYOS-Azure
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-Hardened-BYOS-EC2
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-Hardened-BYOS-GCE
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-SAP-Azure
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-SAP-Azure-3P
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-SAP-Azure-LI-BYOS-Production
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-SAP-BYOS-Azure
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-SAP-BYOS-EC2
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-SAP-BYOS-GCE
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-SAP-EC2
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-SAP-GCE
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-SAP-GCE-3P
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-SAP-Hardened-Azure
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-SAP-Hardened-BYOS-Azure
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-SAP-Hardened-BYOS-EC2
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-SAP-Hardened-BYOS-GCE
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-SAP-Hardened-GCE
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-SAPCAL-Azure
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-SAPCAL-EC2
libgnutls30-3.8.3-150600.4.12.1
Image SLES15-SP7-SAPCAL-GCE
libgnutls30-3.8.3-150600.4.12.1
Image ai_15_6
libgnutls30-3.8.3-150600.4.12.1
Image server-image
libgnutls30-3.8.3-150600.4.12.1
Image server-image-sles15sp7
libgnutls30-3.8.3-150600.4.12.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
gnutls-3.8.3-150600.4.12.1
libgnutls-devel-3.8.3-150600.4.12.1
libgnutls30-3.8.3-150600.4.12.1
libgnutls30-32bit-3.8.3-150600.4.12.1
libgnutlsxx-devel-3.8.3-150600.4.12.1
libgnutlsxx30-3.8.3-150600.4.12.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
gnutls-3.8.3-150600.4.12.1
libgnutls-devel-3.8.3-150600.4.12.1
libgnutls30-3.8.3-150600.4.12.1
libgnutls30-32bit-3.8.3-150600.4.12.1
libgnutlsxx-devel-3.8.3-150600.4.12.1
libgnutlsxx30-3.8.3-150600.4.12.1
openSUSE Leap 15.6
gnutls-3.8.3-150600.4.12.1
libgnutls-devel-3.8.3-150600.4.12.1
libgnutls-devel-32bit-3.8.3-150600.4.12.1
libgnutls30-3.8.3-150600.4.12.1
libgnutls30-32bit-3.8.3-150600.4.12.1
libgnutlsxx-devel-3.8.3-150600.4.12.1
libgnutlsxx30-3.8.3-150600.4.12.1

Описание

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.


Затронутые продукты
Container bci/spack:0.23:libgnutls30-3.8.3-150600.4.12.1
Container containers/open-webui:0:libgnutls30-3.8.3-150600.4.12.1
Container containers/vllm-openai:0:libgnutls30-3.8.3-150600.4.12.1
Container suse/manager/5.0/x86_64/server:latest:libgnutls30-3.8.3-150600.4.12.1

Ссылки