ALSA-2025:17415

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

• gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)
• gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)
• gnutls: NULL pointer dereference in gnutlsfigurecommonciphersuite() (CVE-2025-6395)

Bug Fix(es) and Enhancement(s):

• gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620)
• gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622)
• gnutls: NULL pointer dereference in gnutlsfigurecommonciphersuite() (BZ#2376755)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.