RHSA-2026:6618MediumCVSS 5.3
Red Hat Security Advisory: gnutls security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2025-14831 — gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification
🎯 Affected products67
- Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
- gnutls-0:3.8.9-9.el10_0.17.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
- gnutls-0:3.8.9-9.el10_0.17.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
- gnutls-0:3.8.9-9.el10_0.17.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
- gnutls-0:3.8.9-9.el10_0.17.src as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
- gnutls-0:3.8.9-9.el10_0.17.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
- gnutls-c++-0:3.8.9-9.el10_0.17.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- gnutls-c++-0:3.8.9-9.el10_0.17.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- gnutls-c++-0:3.8.9-9.el10_0.17.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- gnutls-c++-0:3.8.9-9.el10_0.17.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- gnutls-c++-debuginfo-0:3.8.9-9.el10_0.17.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- gnutls-c++-debuginfo-0:3.8.9-9.el10_0.17.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
- gnutls-c++-debuginfo-0:3.8.9-9.el10_0.17.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- gnutls-c++-debuginfo-0:3.8.9-9.el10_0.17.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
- gnutls-c++-debuginfo-0:3.8.9-9.el10_0.17.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- gnutls-c++-debuginfo-0:3.8.9-9.el10_0.17.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
- gnutls-c++-debuginfo-0:3.8.9-9.el10_0.17.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- gnutls-c++-debuginfo-0:3.8.9-9.el10_0.17.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
- gnutls-dane-0:3.8.9-9.el10_0.17.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- gnutls-dane-0:3.8.9-9.el10_0.17.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- gnutls-dane-0:3.8.9-9.el10_0.17.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- gnutls-dane-0:3.8.9-9.el10_0.17.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- gnutls-dane-debuginfo-0:3.8.9-9.el10_0.17.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- gnutls-dane-debuginfo-0:3.8.9-9.el10_0.17.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
- gnutls-dane-debuginfo-0:3.8.9-9.el10_0.17.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- gnutls-dane-debuginfo-0:3.8.9-9.el10_0.17.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
- gnutls-dane-debuginfo-0:3.8.9-9.el10_0.17.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- gnutls-dane-debuginfo-0:3.8.9-9.el10_0.17.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
- gnutls-dane-debuginfo-0:3.8.9-9.el10_0.17.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- +37 more not shown
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258