GnuTLS CVE-2025-9820 GNUTLS-SA-2025-11-18

MEDIUM

N/A vendor:alpine

Information Disclosure

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 23:07 vuln.today

DescriptionCVE.org

Alpine Linux: gnutls fixed in 3.8.11-r0

AnalysisAI

GnuTLS on Alpine Linux is addressed by the fix released in package version 3.8.11-r0, corresponding to upstream advisory GNUTLS-SA-2025-11-18. The underlying vulnerability details - including attack vector, impact class, and affected functionality - are not disclosed in the available intelligence at this time. Security teams running Alpine Linux with GnuTLS should treat this as a library-level security fix and prioritize patching given GnuTLS's role in TLS/SSL communications across a broad range of dependent applications.

Technical ContextAI

GnuTLS is an open-source library implementing TLS, SSL, and DTLS protocols, widely used across Linux distributions including Alpine Linux for secure communications. It underpins many system-level and application-level services. The upstream advisory identifier GNUTLS-SA-2025-11-18 suggests this was a coordinated disclosure tracked by the GnuTLS project. No CWE classification is available in the provided data, so the root cause class (e.g., memory corruption, improper validation, cryptographic flaw) cannot be determined from available intelligence. The CPE for affected packages would be cpe:/a:gnu:gnutls within Alpine Linux contexts, but no explicit CPE strings were provided.

Affected ProductsAI

Alpine Linux systems running GnuTLS packages prior to version 3.8.11-r0 are confirmed affected, as reported by the Alpine Linux vendor. The upstream GnuTLS advisory GNUTLS-SA-2025-11-18 likely identifies the corresponding upstream affected version range, but that upstream advisory was not included in the available data. Specific Alpine Linux release branches (e.g., edge, 3.20, 3.21) impacted are not enumerated in the provided intelligence. No CPE strings or upstream version bounds were supplied.

RemediationAI

The primary fix is to upgrade the Alpine Linux GnuTLS package to version 3.8.11-r0 or later using the Alpine package manager: 'apk upgrade gnutls'. This is the vendor-released patch per Alpine Linux. Security teams should also consult the upstream GnuTLS advisory GNUTLS-SA-2025-11-18 directly at https://gnutls.org/security.html for the authoritative upstream fix version and any workarounds. As GnuTLS is a shared library, restarting all services linked against it after upgrading is necessary for the fix to take effect - a system reboot is the safest approach in production. No upstream patch version beyond the Alpine package designation of 3.8.11-r0 can be independently confirmed from available data. No specific compensating controls can be recommended without knowing the vulnerability class.