Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian: gnutls28 Critical Buffer Overrun & Double-free Fix DLA-4267-1

debian lts
Calendar Grey August 9, 2025
Dist Debian Esm H88
Important security flaws in GnuTLS addressed with latest Debian LTS patch DLA-4267-1. Prompt upgrade advised.
Multiple vulnerabilities have been fixed in GnuTLS, a library implementing the SSL, TLS and DTLS protocols
Topics%20covered

Topics Covered

security advisory critical debian buffer overrun double-free gnutls

Summary

CVE-2025-6395

NULL dereference when 2nd Client Hello omits PSK

CVE-2025-32988

Double-free upon error when exporting otherName in SAN

CVE-2025-32990

1-byte write buffer overrun in certtool

For Debian 11 bullseye, these problems have been fixed in version
3.7.1-5+deb11u8.

We recommend that you upgrade your gnutls28 packages.

For the detailed security status of gnutls28 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/gnutls28

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: gnutls28
Version: 3.7.1-5+deb11u8
CVE ID: CVE-2025-6395 CVE-2025-32988 CVE-2025-32990

Topics%20covered

Topics Covered

security advisory critical debian buffer overrun double-free gnutls

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here