Back Linuxsecurity

Fedora 43: Critical Patch for GnuTLS 3.8.11 Addressing CVE-2025

Linuxsecurity •LinuxSecurity Advisories • November 23, 2025

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and other required structures. Update Information : Update to the 3.8.11 release with a fix for CVE-2025-9820 and several enhancements.

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS

protocols and technologies around them. It provides a simple C language

application programming interface (API) to access the secure communications

protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and

other required structures.

Update to the 3.8.11 release with a fix for CVE-2025-9820 and several enhancements.

* Thu Nov 20 2025 Daiki Ueno - 3.8.11-1 - Update to 3.8.11 upstream release - Resolves: rhbz#2416041

[ 1 ] Bug #2388236 - [abrt] Crash under gnutls_x509_trust_list_verify_crt2() (accessing GnuTLS internals from multiple threads at the same time)

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-45b1844342' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical GnuTLS Vulnerabilities Addressed in Fedora 43 Updates Fedora 43 has released critical updates for GnuTLS, addressing vulnerabilities CVE-2025-9820 and CVE-2025-14831. The updates include fixes for a NULL pointer dereference issue and enhancements to the secure communications library, which affects applications relying on GnuTLS for SSL and TLS protocols. 10 sources 39

Extracted Entities

CVEs (1)

CVE-2025-9820