Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 498
Alerts This Week
Warning Icon 1 498

Mageia 9: Gnutls Important Null Pointer Dereference Fix MGASA-2025-0225

mageia
Calendar Grey September 2, 2025
Scroller Mageia
The Gnutls components have been upgraded in Mageia to address various critical flaws that jeopardize the integrity of the system.
MGASA-2025-0225 - Updated gnutls packages fix vulnerabilities

Summary

Description: null pointer dereference in _gnutls_figure_common_ciphersuite(). (CVE-2025-6395) Vulnerability in gnutls othername san export. (CVE-2025-32988) Vulnerability in gnutls sct extension parsing. (CVE-2025-32989) Vulnerability in gnutls certtool template parsing. (CVE-2025-32990)

References

- https://bugs.mageia.org/show_bug.cgi?id=34484

- https://www.openwall.com/lists/oss-security/2025/07/11/3

- https://www.cve.org/CVERecord?id=CVE-2025-6395

- https://www.cve.org/CVERecord?id=CVE-2025-32988

- https://www.cve.org/CVERecord?id=CVE-2025-32989

- https://www.cve.org/CVERecord?id=CVE-2025-32990

Topics%20covered

Topics Covered

security advisory security issue important gnutls NULL pointer dereference Mageia

Resolution

SRPMS

- 9/core/gnutls-3.8.4-1.2.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 02 Sep 2025
URL: https://advisories.mageia.org/MGASA-2025-0225.html
Type: security
CVE: CVE-2025-6395, CVE-2025-32988, CVE-2025-32989, CVE-2025-32990

Topics%20covered

Topics Covered

security advisory security issue important gnutls NULL pointer dereference Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.