GnuTLS CVE-2025-32989 GNUTLS-SA-2025-07-08-1

MEDIUM

N/A vendor:alpine

Information Disclosure

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 23:07 vuln.today

DescriptionCVE.org

Alpine Linux: gnutls fixed in 3.8.11-r0

AnalysisAI

GnuTLS, the open-source TLS/SSL/DTLS implementation library, contains a vulnerability addressed under advisory GNUTLS-SA-2025-07-08-1. Alpine Linux has released a patched package at version 3.8.11-r0 to resolve this issue. The nature of the vulnerability, affected attack surface, and exploitability cannot be characterized from the available data - the upstream GnuTLS advisory should be consulted directly for specifics.

Technical ContextAI

GnuTLS is a widely deployed cryptographic communications library implementing SSL, TLS, and DTLS protocols, used as a foundational dependency across many Linux distributions and applications. The advisory identifier GNUTLS-SA-2025-07-08-1 follows the GnuTLS project's standard security advisory numbering scheme, suggesting this is an upstream-tracked issue. The specific CWE root cause class is not provided in the available data. The affected upstream GnuTLS version range preceding 3.8.11 (Alpine packaging) is not independently confirmed from the supplied intelligence.

Affected ProductsAI

Alpine Linux systems running GnuTLS packages prior to version 3.8.11-r0 are confirmed affected per the Alpine vendor advisory. The upstream GnuTLS version range that corresponds to this Alpine package revision is not independently confirmed from the supplied data. CPE strings for affected versions are not available in the provided intelligence. Administrators should consult the Alpine Linux security tracker and the upstream GnuTLS advisory GNUTLS-SA-2025-07-08-1 for authoritative version scope.

RemediationAI

On Alpine Linux, upgrade the gnutls package to version 3.8.11-r0 or later using the standard package manager: 'apk upgrade gnutls'. This is the only confirmed remediation step available from the provided data. The upstream GnuTLS advisory GNUTLS-SA-2025-07-08-1 should be reviewed at gnutls.org for additional guidance, workarounds, or compensating controls applicable to non-Alpine deployments. For systems where immediate patching is not possible, restricting network exposure of applications that depend on GnuTLS is a generic precaution, but its effectiveness cannot be assessed without knowing the vulnerability class.