GnuTLS CVE-2025-32988 GNUTLS-SA-2025-07-08-2

MEDIUM

N/A vendor:alpine

Information Disclosure

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 23:07 vuln.today

DescriptionCVE.org

Alpine Linux: gnutls fixed in 3.8.11-r0

AnalysisAI

GnuTLS, the widely-used TLS/SSL/DTLS cryptographic library, contains a vulnerability tracked as GNUTLS-SA-2025-07-08-2 that was remediated in Alpine Linux's package version 3.8.11-r0. The vulnerability's nature, impact class, and affected attack surface cannot be characterized from the available intelligence - the CVE description contains only the patch notation and no technical detail. Given that GnuTLS is a foundational security library used across countless Linux-based systems, consumers of Alpine Linux packages should treat this as a priority update pending full advisory disclosure. No public exploit has been identified at time of analysis.

Technical ContextAI

GnuTLS is an open-source cryptographic library providing implementations of SSL 3.0, TLS 1.0-1.3, and DTLS, commonly used in Linux distributions as an alternative to OpenSSL. The advisory identifier GNUTLS-SA-2025-07-08-2 indicates this is the second security advisory issued by the GnuTLS project on or around July 8, 2025. Alpine Linux ships GnuTLS as a core package dependency for many applications that require secure transport. The specific CWE root cause class is not provided in the available data - it is unknown whether this is a memory corruption issue, a cryptographic protocol flaw, a validation error, or another class entirely. CPE data was not supplied, preventing precise version-range scoping beyond the Alpine-specific package notation.

Affected ProductsAI

Based on available data, Alpine Linux packages of GnuTLS prior to version 3.8.11-r0 are confirmed affected. The upstream GnuTLS version range corresponding to the Alpine package 3.8.11-r0 is not independently confirmed from the provided data - 3.8.11-r0 is Alpine's package revision notation, not a pure upstream GnuTLS version number. No CPE strings were supplied. Other Linux distributions shipping GnuTLS from the same upstream source branch (e.g., Debian, Fedora, RHEL, Arch) may also be affected but are not confirmed by this advisory. Consumers should consult upstream GnuTLS advisory GNUTLS-SA-2025-07-08-2 directly for the full affected version matrix.

RemediationAI

On Alpine Linux, upgrade the gnutls package to version 3.8.11-r0 or later using 'apk upgrade gnutls'. This is the vendor-confirmed fix per the Alpine Linux security report. For other distributions, consult the upstream GnuTLS project advisory GNUTLS-SA-2025-07-08-2 (expected at https://www.gnutls.org/security-new.html) for distribution-specific patched releases. Because the vulnerability class is unknown, no targeted compensating controls can be responsibly recommended - generic mitigations such as restricting network exposure of GnuTLS-dependent services may reduce attack surface but carry the trade-off of service disruption and should be treated as temporary measures only until a full advisory is published. Do not assume that absence of a CVSS score implies low severity; advisory GNUTLS-SA-2025-07-08-2-2 may be assigned a severity rating upon full publication.