GnuTLS CVE-2025-6395 GNUTLS-SA-2025-07-08-4

MEDIUM

N/A vendor:alpine

Information Disclosure

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 23:08 vuln.today

DescriptionCVE.org

Alpine Linux: gnutls fixed in 3.8.11-r0

AnalysisAI

GnuTLS, the secure communications library implementing SSL/TLS/DTLS protocols, has a vulnerability tracked under upstream advisory GNUTLS-SA-2025-07-08-4 that was addressed in Alpine Linux package version 3.8.11-r0. The nature of the flaw - attack vector, impact class, and root cause - is not disclosed in available intelligence, which is limited to the vendor-sourced Alpine Linux fix notification. No active exploitation, public proof-of-concept, or EPSS data is available at time of analysis.

Technical ContextAI

GnuTLS is a widely deployed open-source TLS library used across Linux distributions for implementing encrypted communications. It underpins a broad range of system and application services on Alpine Linux. The upstream advisory identifier GNUTLS-SA-2025-07-08-4 follows the GnuTLS project's standard advisory naming scheme (GNUTLS-SA-YYYY-MM-DD-N), indicating this was formally acknowledged by the GnuTLS maintainers. The specific CWE root cause class, affected protocol component (e.g., handshake, certificate parsing, record layer), and exact upstream GnuTLS version range are not present in available data. The Alpine Linux fix package version 3.8.11-r0 confirms the patch has been integrated into Alpine's package tree, but the corresponding upstream GnuTLS release version is not independently confirmed from this data.

Affected ProductsAI

The confirmed affected product is GnuTLS as packaged in Alpine Linux, fixed in Alpine package version gnutls-3.8.11-r0. The upstream GnuTLS version range affected is not specified in available data. No CPE strings are provided in the input intelligence. Other Linux distributions carrying a vulnerable GnuTLS version may also be affected, but cross-distribution scope is not confirmed from this data source alone. Consumers should reference the GnuTLS project advisory GNUTLS-SA-2025-07-08-4 directly for upstream version bounds.

RemediationAI

The primary remediation for Alpine Linux systems is to upgrade the gnutls package to version 3.8.11-r0 or later using the Alpine package manager (apk upgrade gnutls). This fix is confirmed as available via the Alpine Linux vendor advisory. For upstream GnuTLS consumers on other distributions, reference advisory GNUTLS-SA-2025-07-08-4 at the GnuTLS project security advisories page to identify the corresponding upstream patched release and apply the vendor-provided update. No specific workarounds, compensating controls, or feature-disablement options can be recommended without knowing the vulnerability class or affected component. After patching, services linking against libgnutls should be restarted to load the updated library.