Alerts This Week
Warning Icon 1 540
Alerts This Week
Warning Icon 1 540

Mageia 9: Gnutls Important Null Pointer Dereference Fix MGASA-2025-0225

mageia
Calendar Grey September 2, 2025
Dist Mageia Esm H88
The Gnutls components have been upgraded in Mageia to address various critical flaws that jeopardize the integrity of the system.
MGASA-2025-0225 - Updated gnutls packages fix vulnerabilities

Summary

Description: null pointer dereference in _gnutls_figure_common_ciphersuite(). (CVE-2025-6395) Vulnerability in gnutls othername san export. (CVE-2025-32988) Vulnerability in gnutls sct extension parsing. (CVE-2025-32989) Vulnerability in gnutls certtool template parsing. (CVE-2025-32990)

References

- https://bugs.mageia.org/show_bug.cgi?id=34484

- https://www.openwall.com/lists/oss-security/2025/07/11/3

- https://www.cve.org/CVERecord?id=CVE-2025-6395

- https://www.cve.org/CVERecord?id=CVE-2025-32988

- https://www.cve.org/CVERecord?id=CVE-2025-32989

- https://www.cve.org/CVERecord?id=CVE-2025-32990

Resolution

SRPMS

- 9/core/gnutls-3.8.4-1.2.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 02 Sep 2025
URL: https://advisories.mageia.org/MGASA-2025-0225.html
Type: security
CVE: CVE-2025-6395, CVE-2025-32988, CVE-2025-32989, CVE-2025-32990

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here