A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service (DoS) that could potentially crash the system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnutls-develUpgrade gnutls-c++Upgrade gnutls-daneUpgrade gnutls-utilsUpgrade gnutls | Sep 30, 2025 | Sep 17, 2025 |
| Alpine Linux | — | Upgrade gnutls | Dec 5, 2025 | Jul 10, 2025 |
| Amazon Linux Ami 2 | — | Upgrade gnutlsUpgrade gnutls-develUpgrade gnutls-utilsUpgrade gnutls-daneUpgrade gnutls-debuginfoUpgrade gnutls-c++ | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade gnutls-c++Upgrade gnutls-daneUpgrade gnutls-utils-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-debuginfoUpgrade gnutls-utilsUpgrade gnutls-dane-debuginfoUpgrade gnutlsUpgrade gnutls-c++-debuginfoUpgrade gnutls-devel | Aug 19, 2025 | Jul 9, 2025 |
| Debian | — | Upgrade gnutls28 | Jul 11, 2025 | Jul 11, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Freebsd | — | Upgrade gnutls | Jul 15, 2025 | Jul 14, 2025 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Sep 18, 2025 | Sep 17, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade gnutls-utilsUpgrade gnutls | Nov 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gnutls-utilsUpgrade gnutls | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gnutls-utilsUpgrade gnutls | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade gnutlsUpgrade gnutls-utils | Oct 24, 2025 | Sep 9, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Dec 15, 2025 |
| Oracle_linux | — | Upgrade gnutls-utilsUpgrade gnutls-fipsUpgrade gnutlsUpgrade gnutls-c++Upgrade gnutls-daneUpgrade gnutls-devel | Sep 22, 2025 | Jul 9, 2025 |
| Redhat_linux | — | Upgrade gnutls-debugsourceUpgrade gnutls-utils-debuginfoUpgrade gnutls-dane-debuginfoUpgrade gnutls-c++Upgrade gnutls-c++-debuginfoUpgrade gnutls-debuginfoNo solution existsUpgrade gnutls-daneUpgrade gnutls-fipsUpgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-devel | Jul 11, 2025 | Jul 9, 2025 |
| Rocky_linux | — | Upgrade gnutls-utils-debuginfoUpgrade gnutls-debuginfoUpgrade gnutls-dane-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-daneUpgrade gnutls-develUpgrade gnutls-fipsUpgrade gnutls-c++Upgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-c++-debuginfo | Feb 5, 2026 | Oct 8, 2025 |
| Suse | — | Upgrade libgnutls30-hmacUpgrade libgnutlsxx28Upgrade libgnutls-openssl-develUpgrade gnutls-guileUpgrade libgnutls30-hmac-32bitUpgrade libgnutls-devel-32bitUpgrade libgnutls-openssl27Upgrade libgnutlsxx30Upgrade libgnutls28Upgrade libgnutlsxx-develUpgrade libgnutls-develUpgrade gnutlsUpgrade libgnutls28-32bitUpgrade libgnutls30-32bitUpgrade libgnutls30 | Dec 5, 2025 | Sep 20, 2025 |
| Ubuntu | — | Upgrade libgnutls30Upgrade libgnutls30 (Ubuntu Pro)Upgrade libgnutls30t64 | Jul 14, 2025 | Jul 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 24, 2025 | Jul 10, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub