The Red Hat Security Advisory RHSA-2025:17361 addresses multiple vulnerabilities in the GnuTLS library, which implements cryptographic protocols such as SSL, TLS, and DTLS. The issues include inefficient DER decoding in libtasn1 leading to remote denial of service (CVE-2024-12243), vulnerabilities in certtool template parsing (CVE-2025-32990), SCT extension parsing (CVE-2025-32989), otherName SAN export (CVE-2025-32988), and a NULL pointer dereference in the _gnutls_figure_common_ciphersuite() function (CVE-2025-6395). These vulnerabilities have been fixed in updated GnuTLS packages for Red Hat Enterprise Linux 9.2 and related variants. The advisory provides references to the CVE pages for detailed impact and scoring information and directs users to Red Hat's update article for remediation instructions.

The identified vulnerabilities may allow remote denial of service conditions and potential crashes due to NULL pointer dereferences in the GnuTLS library. Parsing flaws in certificate-related components could lead to unexpected behavior or security weaknesses in TLS operations. Red Hat rates the overall security impact as moderate. There are no known exploits in the wild at the time of this advisory.

Red Hat has released updated GnuTLS packages that address all listed vulnerabilities. Users of affected Red Hat Enterprise Linux 9.2 versions and related products should apply the provided security update as detailed in Red Hat's advisory and update article (https://access.redhat.com/articles/11258). Since this is an official fix, applying the update fully mitigates the vulnerabilities. No additional mitigation steps are indicated by the vendor.