RHSA-2026:3477
Vulnerability from csaf_redhat - Published: 2026-03-02 09:19 - Updated: 2026-03-02 17:18Summary
Red Hat Security Advisory: gnutls security update
Notes
Topic
An update for gnutls is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.
Security Fix(es):
* gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function (CVE-2025-9820)
* gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification (CVE-2025-14831)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for gnutls is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.\n\nSecurity Fix(es):\n\n* gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function (CVE-2025-9820)\n\n* gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification (CVE-2025-14831)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:3477",
"url": "https://access.redhat.com/errata/RHSA-2026:3477"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2392528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2392528"
},
{
"category": "external",
"summary": "2423177",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423177"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3477.json"
}
],
"title": "Red Hat Security Advisory: gnutls security update",
"tracking": {
"current_release_date": "2026-03-02T17:18:57+00:00",
"generator": {
"date": "2026-03-02T17:18:57+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.2"
}
},
"id": "RHSA-2026:3477",
"initial_release_date": "2026-03-02T09:19:32+00:00",
"revision_history": [
{
"date": "2026-03-02T09:19:32+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-03-02T09:19:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-03-02T17:18:57+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.1"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"product": {
"name": "gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"product_id": "gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-c%2B%2B@3.8.10-3.el10_1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"product": {
"name": "gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"product_id": "gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-dane@3.8.10-3.el10_1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"product": {
"name": "gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"product_id": "gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-devel@3.8.10-3.el10_1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"product": {
"name": "gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"product_id": "gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-fips@3.8.10-3.el10_1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"product": {
"name": "gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"product_id": "gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-utils@3.8.10-3.el10_1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"product": {
"name": "gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"product_id": "gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debugsource@3.8.10-3.el10_1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"product": {
"name": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"product_id": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-c%2B%2B-debuginfo@3.8.10-3.el10_1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"product": {
"name": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"product_id": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-dane-debuginfo@3.8.10-3.el10_1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"product": {
"name": "gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"product_id": "gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debuginfo@3.8.10-3.el10_1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"product": {
"name": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"product_id": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-utils-debuginfo@3.8.10-3.el10_1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "gnutls-0:3.8.10-3.el10_1.aarch64",
"product": {
"name": "gnutls-0:3.8.10-3.el10_1.aarch64",
"product_id": "gnutls-0:3.8.10-3.el10_1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@3.8.10-3.el10_1?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"product": {
"name": "gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"product_id": "gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-c%2B%2B@3.8.10-3.el10_1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"product": {
"name": "gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"product_id": "gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-dane@3.8.10-3.el10_1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"product": {
"name": "gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"product_id": "gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-devel@3.8.10-3.el10_1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"product": {
"name": "gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"product_id": "gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-fips@3.8.10-3.el10_1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"product": {
"name": "gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"product_id": "gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-utils@3.8.10-3.el10_1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"product": {
"name": "gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"product_id": "gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debugsource@3.8.10-3.el10_1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"product": {
"name": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"product_id": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-c%2B%2B-debuginfo@3.8.10-3.el10_1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"product": {
"name": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"product_id": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-dane-debuginfo@3.8.10-3.el10_1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"product": {
"name": "gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"product_id": "gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debuginfo@3.8.10-3.el10_1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"product": {
"name": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"product_id": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-utils-debuginfo@3.8.10-3.el10_1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "gnutls-0:3.8.10-3.el10_1.ppc64le",
"product": {
"name": "gnutls-0:3.8.10-3.el10_1.ppc64le",
"product_id": "gnutls-0:3.8.10-3.el10_1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@3.8.10-3.el10_1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-c++-0:3.8.10-3.el10_1.s390x",
"product": {
"name": "gnutls-c++-0:3.8.10-3.el10_1.s390x",
"product_id": "gnutls-c++-0:3.8.10-3.el10_1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-c%2B%2B@3.8.10-3.el10_1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnutls-dane-0:3.8.10-3.el10_1.s390x",
"product": {
"name": "gnutls-dane-0:3.8.10-3.el10_1.s390x",
"product_id": "gnutls-dane-0:3.8.10-3.el10_1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-dane@3.8.10-3.el10_1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnutls-devel-0:3.8.10-3.el10_1.s390x",
"product": {
"name": "gnutls-devel-0:3.8.10-3.el10_1.s390x",
"product_id": "gnutls-devel-0:3.8.10-3.el10_1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-devel@3.8.10-3.el10_1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnutls-fips-0:3.8.10-3.el10_1.s390x",
"product": {
"name": "gnutls-fips-0:3.8.10-3.el10_1.s390x",
"product_id": "gnutls-fips-0:3.8.10-3.el10_1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-fips@3.8.10-3.el10_1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnutls-utils-0:3.8.10-3.el10_1.s390x",
"product": {
"name": "gnutls-utils-0:3.8.10-3.el10_1.s390x",
"product_id": "gnutls-utils-0:3.8.10-3.el10_1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-utils@3.8.10-3.el10_1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"product": {
"name": "gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"product_id": "gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debugsource@3.8.10-3.el10_1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"product": {
"name": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"product_id": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-c%2B%2B-debuginfo@3.8.10-3.el10_1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"product": {
"name": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"product_id": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-dane-debuginfo@3.8.10-3.el10_1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"product": {
"name": "gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"product_id": "gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debuginfo@3.8.10-3.el10_1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"product": {
"name": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"product_id": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-utils-debuginfo@3.8.10-3.el10_1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnutls-0:3.8.10-3.el10_1.s390x",
"product": {
"name": "gnutls-0:3.8.10-3.el10_1.s390x",
"product_id": "gnutls-0:3.8.10-3.el10_1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@3.8.10-3.el10_1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"product": {
"name": "gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"product_id": "gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-c%2B%2B@3.8.10-3.el10_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"product": {
"name": "gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"product_id": "gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-dane@3.8.10-3.el10_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"product": {
"name": "gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"product_id": "gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-devel@3.8.10-3.el10_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"product": {
"name": "gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"product_id": "gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-fips@3.8.10-3.el10_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"product": {
"name": "gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"product_id": "gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-utils@3.8.10-3.el10_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"product": {
"name": "gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"product_id": "gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debugsource@3.8.10-3.el10_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"product": {
"name": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"product_id": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-c%2B%2B-debuginfo@3.8.10-3.el10_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"product": {
"name": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"product_id": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-dane-debuginfo@3.8.10-3.el10_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"product": {
"name": "gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"product_id": "gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-debuginfo@3.8.10-3.el10_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64",
"product": {
"name": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64",
"product_id": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls-utils-debuginfo@3.8.10-3.el10_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnutls-0:3.8.10-3.el10_1.x86_64",
"product": {
"name": "gnutls-0:3.8.10-3.el10_1.x86_64",
"product_id": "gnutls-0:3.8.10-3.el10_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@3.8.10-3.el10_1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "gnutls-0:3.8.10-3.el10_1.src",
"product": {
"name": "gnutls-0:3.8.10-3.el10_1.src",
"product_id": "gnutls-0:3.8.10-3.el10_1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnutls@3.8.10-3.el10_1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:3.8.10-3.el10_1.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.src"
},
"product_reference": "gnutls-0:3.8.10-3.el10_1.src",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-c++-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-c++-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-c++-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-c++-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-c++-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-dane-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-dane-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-dane-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-dane-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-dane-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debugsource-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debugsource-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debugsource-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-devel-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-fips-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-fips-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-fips-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-fips-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-fips-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-utils-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:3.8.10-3.el10_1.src as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.src"
},
"product_reference": "gnutls-0:3.8.10-3.el10_1.src",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-c++-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-c++-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-c++-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-c++-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-c++-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-dane-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-dane-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-dane-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-dane-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-dane-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debugsource-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debugsource-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-debugsource-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-devel-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-devel-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-fips-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-fips-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-fips-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-fips-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-fips-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-utils-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64"
},
"product_reference": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le"
},
"product_reference": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x"
},
"product_reference": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"relates_to_product_reference": "BaseOS-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64"
},
"product_reference": "gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64",
"relates_to_product_reference": "BaseOS-10.1.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-9820",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2025-09-02T10:00:18.839000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2392528"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Low, since exploitation requires local access or a malicious PKCS#11 token. While the impact is limited to denial of service or potential code execution in constrained scenarios, the vulnerability stems from a lack of proper bounds checking during token label handling in GnuTLS. Users should treat this as a security concern in environments where untrusted tokens may be introduced.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.src",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.src",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-9820"
},
{
"category": "external",
"summary": "RHBZ#2392528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2392528"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-9820"
},
{
"category": "external",
"summary": "https://gitlab.com/gnutls/gnutls/-/commit/1d56f96f6ab5034d677136b9d50b5a75dff0faf5",
"url": "https://gitlab.com/gnutls/gnutls/-/commit/1d56f96f6ab5034d677136b9d50b5a75dff0faf5"
},
{
"category": "external",
"summary": "https://gitlab.com/gnutls/gnutls/-/issues/1732",
"url": "https://gitlab.com/gnutls/gnutls/-/issues/1732"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-11-18",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-11-18"
}
],
"release_date": "2025-11-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-02T09:19:32+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.src",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.src",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:3477"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Applying the upstream patch or vendor-supplied security update is the recommended resolution.",
"product_ids": [
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.src",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.src",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.src",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.src",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function"
},
{
"cve": "CVE-2025-14831",
"cwe": {
"id": "CWE-407",
"name": "Inefficient Algorithmic Complexity"
},
"discovery_date": "2025-12-17T14:48:30.222000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2423177"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat. GnuTLS is susceptible to a denial of service attack due to excessive CPU and memory consumption. This occurs when processing specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs) during certificate verification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.src",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.src",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-14831"
},
{
"category": "external",
"summary": "RHBZ#2423177",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423177"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-14831",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14831"
}
],
"release_date": "2026-02-09T14:26:34.939000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-02T09:19:32+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.src",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.src",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:3477"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.src",
"AppStream-10.1.Z:gnutls-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"AppStream-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.src",
"BaseOS-10.1.Z:gnutls-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-c++-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-c++-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-dane-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-dane-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-debuginfo-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-debugsource-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-devel-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-fips-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-utils-0:3.8.10-3.el10_1.x86_64",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.aarch64",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.ppc64le",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.s390x",
"BaseOS-10.1.Z:gnutls-utils-debuginfo-0:3.8.10-3.el10_1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…