Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2025:02589-1

UNKNOWN

Security update for gnutls

Published Aug 1, 2025

Modified 5 months ago

Fix available

Details

This update for gnutls fixes the following issues:

CVE-2025-6395: Fix NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299)
CVE-2025-32988: Fix double-free due to incorrect ownership handling in the export logic of SAN entries containing an otherName (bsc#1246232)
CVE-2025-32989: Fix heap buffer overread when handling the CT SCT extension during X.509 certificate parsing (bsc#1246233)
CVE-2025-32990: Fix 1-byte heap buffer overflow when parsing templates with certtool (bsc#1246267)

Affected Packages

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSgnutls

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibgnutls-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibgnutls30

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibgnutls30-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibgnutls30-hmac

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibgnutls30-hmac-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibgnutlsxx-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibgnutlsxx28

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSgnutls

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibgnutls-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibgnutls30

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibgnutls30-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibgnutls30-hmac

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibgnutls30-hmac-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibgnutlsxx-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibgnutlsxx28

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSgnutls

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSgnutls-guile

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSlibgnutls-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSlibgnutls30

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSlibgnutls30-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSlibgnutls30-hmac

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSlibgnutls30-hmac-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSlibgnutlsxx-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSlibgnutlsxx28

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSgnutls

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSgnutls-guile

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSlibgnutls-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSlibgnutls30

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSlibgnutls30-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSlibgnutls30-hmac

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSlibgnutls30-hmac-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSlibgnutlsxx-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSlibgnutlsxx28

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Micro 5.4gnutls

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Micro 5.4libgnutls30

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Micro 5.4libgnutls30-hmac

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Micro 5.5gnutls

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Micro 5.5libgnutls30

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Micro 5.5libgnutls30-hmac

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server 15 SP4-LTSSgnutls

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibgnutls-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibgnutls30

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibgnutls30-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibgnutls30-hmac

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibgnutls30-hmac-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibgnutlsxx-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibgnutlsxx28

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server 15 SP5-LTSSgnutls

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server 15 SP5-LTSSgnutls-guile

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server 15 SP5-LTSSlibgnutls-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server 15 SP5-LTSSlibgnutls30

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server 15 SP5-LTSSlibgnutls30-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server 15 SP5-LTSSlibgnutls30-hmac

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server 15 SP5-LTSSlibgnutls30-hmac-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server 15 SP5-LTSSlibgnutlsxx-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server 15 SP5-LTSSlibgnutlsxx28

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4gnutls

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libgnutls-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libgnutls30

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libgnutls30-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libgnutls30-hmac

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libgnutls30-hmac-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libgnutlsxx-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libgnutlsxx28

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5gnutls

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5gnutls-guile

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5libgnutls-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5libgnutls30

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5libgnutls30-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5libgnutls30-hmac

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5libgnutls30-hmac-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5libgnutlsxx-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5libgnutlsxx28

Fixed in:

3.7.3-150400.4.50.1

SUSE:Manager Proxy 4.3gnutls

Fixed in:

3.7.3-150400.4.50.1

SUSE:Manager Proxy 4.3libgnutls-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Manager Proxy 4.3libgnutls30

Fixed in:

3.7.3-150400.4.50.1

SUSE:Manager Proxy 4.3libgnutls30-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Manager Proxy 4.3libgnutls30-hmac

Fixed in:

3.7.3-150400.4.50.1

SUSE:Manager Proxy 4.3libgnutls30-hmac-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Manager Proxy 4.3libgnutlsxx-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Manager Proxy 4.3libgnutlsxx28

Fixed in:

3.7.3-150400.4.50.1

SUSE:Manager Server 4.3gnutls

Fixed in:

3.7.3-150400.4.50.1

SUSE:Manager Server 4.3libgnutls-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Manager Server 4.3libgnutls30

Fixed in:

3.7.3-150400.4.50.1

SUSE:Manager Server 4.3libgnutls30-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Manager Server 4.3libgnutls30-hmac

Fixed in:

3.7.3-150400.4.50.1

SUSE:Manager Server 4.3libgnutls30-hmac-32bit

Fixed in:

3.7.3-150400.4.50.1

SUSE:Manager Server 4.3libgnutlsxx-devel

Fixed in:

3.7.3-150400.4.50.1

SUSE:Manager Server 4.3libgnutlsxx28

Fixed in:

3.7.3-150400.4.50.1

References

REPORThttps://bugzilla.suse.com/1246232 REPORThttps://bugzilla.suse.com/1246233 REPORThttps://bugzilla.suse.com/1246267 REPORThttps://bugzilla.suse.com/1246299 WEBhttps://www.suse.com/security/cve/CVE-2025-32988 WEBhttps://www.suse.com/security/cve/CVE-2025-32989 WEBhttps://www.suse.com/security/cve/CVE-2025-32990 WEBhttps://www.suse.com/security/cve/CVE-2025-6395 ADVISORYhttps://www.suse.com/support/update/announcement/2025/suse-su-202502589-1/

SUSE-SU-2025:02589-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2025:02589-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline