Moderate Security Vulnerability in GnuTLS Package: Multiple Issues Addressed
Summary
ALSA-2025:17415: Moderate: gnutls security, bug fix, and enhancement update. Affects gnutls versions < 3.6.16-8.el8_10.4. Fixed in 3.6.16-8.el8_10.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The GnuTLS package provides the GNU Transport Layer Security library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. It is widely used for securing communications over networks. The package is crucial for applications that require secure data transmission, making it a key component in many software systems. However, recent vulnerabilities have been identified that could compromise the security of applications relying on this library.
Vulnerability Detail
The vulnerabilities in the GnuTLS package include issues with certtool template parsing, otherName SAN export, and a NULL pointer dereference in the function _gnutls_figure_common_ciphersuite(). These vulnerabilities can lead to potential security breaches, allowing attackers to exploit the weaknesses for unauthorized access or denial of service. Specifically, CVE-2025-32990 and CVE-2025-32988 relate to improper handling of certificate templates and SAN exports, while CVE-2025-6395 pertains to a critical NULL pointer dereference that could crash applications using GnuTLS.
How To Fix
Minimum fixed version
3.6.16-8.el8_10.4
This is the first release that contains the fix.
sudo dnf update gnutlsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using the affected functionalities of GnuTLS until the package is updated. However, this is not a long-term solution and updating the package is strongly recommended.
Conclusion
The GnuTLS package has been identified with several moderate security vulnerabilities that could impact applications relying on its cryptographic functionalities. It is crucial to update to the latest patched version to mitigate these risks and ensure secure communications.
See every vulnerability recorded for gnutls →
FAQ
GnuTLS is a secure communications library that implements SSL, TLS, and DTLS protocols, providing cryptographic services for applications.
The vulnerabilities include issues with certtool template parsing, otherName SAN export, and a NULL pointer dereference, which could lead to security breaches.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Simply upload your manifest file like package-lock.json to check for vulnerabilities.
If immediate updates are not possible, avoid using the affected functionalities of GnuTLS as a temporary workaround until the update can be applied.
More details about the vulnerabilities can be found on the CVE pages for CVE-2025-32988, CVE-2025-32990, and CVE-2025-6395.
Related vulnerabilities
Recent vulnerabilities recorded for gnutls.
