gpp_maybe Security update for gnutls

SUSE-SLE-Module-Basesystem-15-SP7-2025-2595

This update for gnutls fixes the following issues: - CVE-2025-6395: Fix NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299) - CVE-2025-32988: Fix double-free due to incorrect ownership handling in the export logic of SAN entries containing an otherName (bsc#1246232) - CVE-2025-32989: Fix heap buffer overread when handling the CT SCT extension during X.509 certificate parsing (bsc#1246233) - CVE-2025-32990: Fix 1-byte heap buffer overflow when parsing templates with certtool (bsc#1246267)

• Release Date
  Aug 1 2025
• References
  Bugzilla: 1246233, 1246267, 1246232, 1246299
  CVEs: CVE-2025-32989, CVE-2025-6395, CVE-2025-32990, CVE-2025-32988
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 aarch64

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.8.3-150600.4.9.1 lock rpm lock src

  libgnutls-devel
  Development package for the GnuTLS C API

  3.8.3-150600.4.9.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.8.3-150600.4.9.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.8.3-150600.4.9.1 lock rpm

  libgnutlsxx30
  C++ API for the GNU Transport Layer Security Library

  3.8.3-150600.4.9.1 lock rpm

Basesystem Module 15.7 s390x

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.8.3-150600.4.9.1 lock rpm lock src

  libgnutls-devel
  Development package for the GnuTLS C API

  3.8.3-150600.4.9.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.8.3-150600.4.9.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.8.3-150600.4.9.1 lock rpm

  libgnutlsxx30
  C++ API for the GNU Transport Layer Security Library

  3.8.3-150600.4.9.1 lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.8.3-150600.4.9.1 lock rpm lock src

  libgnutls-devel
  Development package for the GnuTLS C API

  3.8.3-150600.4.9.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.8.3-150600.4.9.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.8.3-150600.4.9.1 lock rpm

  libgnutlsxx30
  C++ API for the GNU Transport Layer Security Library

  3.8.3-150600.4.9.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.8.3-150600.4.9.1 lock rpm lock src

  libgnutls-devel
  Development package for the GnuTLS C API

  3.8.3-150600.4.9.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.8.3-150600.4.9.1 lock rpm

  libgnutls30-32bit
  The GNU Transport Layer Security Library

  3.8.3-150600.4.9.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.8.3-150600.4.9.1 lock rpm

  libgnutlsxx30
  C++ API for the GNU Transport Layer Security Library

  3.8.3-150600.4.9.1 lock rpm