ALSA-2026:5585
- Source
- https://errata.almalinux.org/8/ALSA-2026-5585.html
- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:5585.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/ALSA-2026:5585
- Related
- Published
- 2026-03-24T00:00:00Z
- Modified
- 2026-03-27T09:14:13.029044519Z
- Summary
- Moderate: gnutls security update
- Details
-
The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.
Security Fix(es):
- gnutls: Stack-based Buffer Overflow in gnutlspkcs11token_init() Function (CVE-2025-9820)
- gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification (CVE-2025-14831)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References
Affected packages
AlmaLinux:8 / gnutls
Package
- Name
- gnutls
- Purl
- pkg:rpm/almalinux/gnutls
AlmaLinux:8 / gnutls-c++
Package
- Name
- gnutls-c++
- Purl
- pkg:rpm/almalinux/gnutls-c%2B%2B
AlmaLinux:8 / gnutls-dane
Package
- Name
- gnutls-dane
- Purl
- pkg:rpm/almalinux/gnutls-dane
AlmaLinux:8 / gnutls-devel
Package
- Name
- gnutls-devel
- Purl
- pkg:rpm/almalinux/gnutls-devel