<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for gnutls</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2025:02583-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2025-07-31T16:04:45Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2025-07-31T16:04:45Z</InitialReleaseDate>
    <CurrentReleaseDate>2025-07-31T16:04:45Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for gnutls</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for gnutls fixes the following issues:

- CVE-2025-6395: Fix NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299)
- CVE-2025-32988: Fix double-free due to incorrect ownership handling in the export logic of SAN entries containing an otherName (bsc#1246232)
- CVE-2025-32990: Fix 1-byte heap buffer overflow when parsing templates with certtool (bsc#1246267)
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-2025-2583,SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-2583,SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-2583,SUSE-SLE-Product-SLES_SAP-15-SP3-2025-2583,SUSE-SUSE-MicroOS-5.1-2025-2583,SUSE-SUSE-MicroOS-5.2-2025-2583,SUSE-Storage-7.1-2025-2583</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2025/suse-su-202502583-1/</URL>
      <Description>Link for SUSE-SU-2025:02583-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-updates/2025-July/040991.html</URL>
      <Description>E-Mail link for SUSE-SU-2025:02583-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1246232</URL>
      <Description>SUSE Bug 1246232</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1246267</URL>
      <Description>SUSE Bug 1246267</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1246299</URL>
      <Description>SUSE Bug 1246299</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-32988/</URL>
      <Description>SUSE CVE CVE-2025-32988 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-32990/</URL>
      <Description>SUSE CVE CVE-2025-32990 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-6395/</URL>
      <Description>SUSE CVE CVE-2025-6395 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="SUSE Enterprise Storage 7.1">
      <Branch Type="Product Name" Name="SUSE Enterprise Storage 7.1">
        <FullProductName ProductID="SUSE Enterprise Storage 7.1" CPE="cpe:/o:suse:ses:7.1">SUSE Enterprise Storage 7.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS" CPE="cpe:/o:suse:sle_hpc-ltss:15:sp3">SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Micro 5.1">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Micro 5.1">
        <FullProductName ProductID="SUSE Linux Enterprise Micro 5.1" CPE="cpe:/o:suse:suse-microos:5.1">SUSE Linux Enterprise Micro 5.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Micro 5.2">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Micro 5.2">
        <FullProductName ProductID="SUSE Linux Enterprise Micro 5.2" CPE="cpe:/o:suse:suse-microos:5.2">SUSE Linux Enterprise Micro 5.2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 15 SP3-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS" CPE="cpe:/o:suse:sles-ltss:15:sp3">SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3" CPE="cpe:/o:suse:sles_sap:15:sp3">SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="gnutls-3.6.7-150200.14.37.1">
      <FullProductName ProductID="gnutls-3.6.7-150200.14.37.1">gnutls-3.6.7-150200.14.37.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gnutls-guile-3.6.7-150200.14.37.1">
      <FullProductName ProductID="gnutls-guile-3.6.7-150200.14.37.1">gnutls-guile-3.6.7-150200.14.37.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgnutls-devel-3.6.7-150200.14.37.1">
      <FullProductName ProductID="libgnutls-devel-3.6.7-150200.14.37.1">libgnutls-devel-3.6.7-150200.14.37.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgnutls-devel-32bit-3.6.7-150200.14.37.1">
      <FullProductName ProductID="libgnutls-devel-32bit-3.6.7-150200.14.37.1">libgnutls-devel-32bit-3.6.7-150200.14.37.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgnutls-devel-64bit-3.6.7-150200.14.37.1">
      <FullProductName ProductID="libgnutls-devel-64bit-3.6.7-150200.14.37.1">libgnutls-devel-64bit-3.6.7-150200.14.37.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgnutls30-3.6.7-150200.14.37.1">
      <FullProductName ProductID="libgnutls30-3.6.7-150200.14.37.1">libgnutls30-3.6.7-150200.14.37.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgnutls30-32bit-3.6.7-150200.14.37.1">
      <FullProductName ProductID="libgnutls30-32bit-3.6.7-150200.14.37.1">libgnutls30-32bit-3.6.7-150200.14.37.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgnutls30-64bit-3.6.7-150200.14.37.1">
      <FullProductName ProductID="libgnutls30-64bit-3.6.7-150200.14.37.1">libgnutls30-64bit-3.6.7-150200.14.37.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgnutls30-hmac-3.6.7-150200.14.37.1">
      <FullProductName ProductID="libgnutls30-hmac-3.6.7-150200.14.37.1">libgnutls30-hmac-3.6.7-150200.14.37.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgnutls30-hmac-32bit-3.6.7-150200.14.37.1">
      <FullProductName ProductID="libgnutls30-hmac-32bit-3.6.7-150200.14.37.1">libgnutls30-hmac-32bit-3.6.7-150200.14.37.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgnutls30-hmac-64bit-3.6.7-150200.14.37.1">
      <FullProductName ProductID="libgnutls30-hmac-64bit-3.6.7-150200.14.37.1">libgnutls30-hmac-64bit-3.6.7-150200.14.37.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgnutlsxx-devel-3.6.7-150200.14.37.1">
      <FullProductName ProductID="libgnutlsxx-devel-3.6.7-150200.14.37.1">libgnutlsxx-devel-3.6.7-150200.14.37.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgnutlsxx28-3.6.7-150200.14.37.1">
      <FullProductName ProductID="libgnutlsxx28-3.6.7-150200.14.37.1">libgnutlsxx28-3.6.7-150200.14.37.1</FullProductName>
    </Branch>
    <Relationship ProductReference="gnutls-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:gnutls-3.6.7-150200.14.37.1">gnutls-3.6.7-150200.14.37.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls-devel-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:libgnutls-devel-3.6.7-150200.14.37.1">libgnutls-devel-3.6.7-150200.14.37.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls-devel-32bit-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:libgnutls-devel-32bit-3.6.7-150200.14.37.1">libgnutls-devel-32bit-3.6.7-150200.14.37.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:libgnutls30-3.6.7-150200.14.37.1">libgnutls30-3.6.7-150200.14.37.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-32bit-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:libgnutls30-32bit-3.6.7-150200.14.37.1">libgnutls30-32bit-3.6.7-150200.14.37.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-hmac-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:libgnutls30-hmac-3.6.7-150200.14.37.1">libgnutls30-hmac-3.6.7-150200.14.37.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-hmac-32bit-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:libgnutls30-hmac-32bit-3.6.7-150200.14.37.1">libgnutls30-hmac-32bit-3.6.7-150200.14.37.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutlsxx-devel-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:libgnutlsxx-devel-3.6.7-150200.14.37.1">libgnutlsxx-devel-3.6.7-150200.14.37.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutlsxx28-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:libgnutlsxx28-3.6.7-150200.14.37.1">libgnutlsxx28-3.6.7-150200.14.37.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="gnutls-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:gnutls-3.6.7-150200.14.37.1">gnutls-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls-devel-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls-devel-3.6.7-150200.14.37.1">libgnutls-devel-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls-devel-32bit-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls-devel-32bit-3.6.7-150200.14.37.1">libgnutls-devel-32bit-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls30-3.6.7-150200.14.37.1">libgnutls30-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-32bit-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls30-32bit-3.6.7-150200.14.37.1">libgnutls30-32bit-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-hmac-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls30-hmac-3.6.7-150200.14.37.1">libgnutls30-hmac-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-hmac-32bit-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls30-hmac-32bit-3.6.7-150200.14.37.1">libgnutls30-hmac-32bit-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutlsxx-devel-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutlsxx-devel-3.6.7-150200.14.37.1">libgnutlsxx-devel-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutlsxx28-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutlsxx28-3.6.7-150200.14.37.1">libgnutlsxx28-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Micro 5.1">
      <FullProductName ProductID="SUSE Linux Enterprise Micro 5.1:libgnutls30-3.6.7-150200.14.37.1">libgnutls30-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Micro 5.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-hmac-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Micro 5.1">
      <FullProductName ProductID="SUSE Linux Enterprise Micro 5.1:libgnutls30-hmac-3.6.7-150200.14.37.1">libgnutls30-hmac-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Micro 5.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="gnutls-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Micro 5.2">
      <FullProductName ProductID="SUSE Linux Enterprise Micro 5.2:gnutls-3.6.7-150200.14.37.1">gnutls-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Micro 5.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Micro 5.2">
      <FullProductName ProductID="SUSE Linux Enterprise Micro 5.2:libgnutls30-3.6.7-150200.14.37.1">libgnutls30-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Micro 5.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-hmac-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Micro 5.2">
      <FullProductName ProductID="SUSE Linux Enterprise Micro 5.2:libgnutls30-hmac-3.6.7-150200.14.37.1">libgnutls30-hmac-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Micro 5.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="gnutls-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:gnutls-3.6.7-150200.14.37.1">gnutls-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls-devel-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls-devel-3.6.7-150200.14.37.1">libgnutls-devel-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls-devel-32bit-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls-devel-32bit-3.6.7-150200.14.37.1">libgnutls-devel-32bit-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls30-3.6.7-150200.14.37.1">libgnutls30-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-32bit-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls30-32bit-3.6.7-150200.14.37.1">libgnutls30-32bit-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-hmac-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls30-hmac-3.6.7-150200.14.37.1">libgnutls30-hmac-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-hmac-32bit-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls30-hmac-32bit-3.6.7-150200.14.37.1">libgnutls30-hmac-32bit-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutlsxx-devel-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutlsxx-devel-3.6.7-150200.14.37.1">libgnutlsxx-devel-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutlsxx28-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutlsxx28-3.6.7-150200.14.37.1">libgnutlsxx28-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="gnutls-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:gnutls-3.6.7-150200.14.37.1">gnutls-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls-devel-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls-devel-3.6.7-150200.14.37.1">libgnutls-devel-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls-devel-32bit-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls-devel-32bit-3.6.7-150200.14.37.1">libgnutls-devel-32bit-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls30-3.6.7-150200.14.37.1">libgnutls30-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-32bit-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls30-32bit-3.6.7-150200.14.37.1">libgnutls30-32bit-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-hmac-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls30-hmac-3.6.7-150200.14.37.1">libgnutls30-hmac-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutls30-hmac-32bit-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls30-hmac-32bit-3.6.7-150200.14.37.1">libgnutls30-hmac-32bit-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutlsxx-devel-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutlsxx-devel-3.6.7-150200.14.37.1">libgnutlsxx-devel-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgnutlsxx28-3.6.7-150200.14.37.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutlsxx28-3.6.7-150200.14.37.1">libgnutlsxx28-3.6.7-150200.14.37.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the type-id OID is invalid or malformed, GnuTLS will call asn1_delete_structure() on an ASN.1 node it does not own, leading to a double-free condition when the parent function or caller later attempts to free the same structure.

This vulnerability can be triggered using only public GnuTLS APIs and may result in denial of service or memory corruption, depending on allocator behavior.</Note>
    </Notes>
    <CVE>CVE-2025-32988</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7.1:gnutls-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutls-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutls-devel-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutls30-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutls30-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutls30-hmac-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutls30-hmac-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutlsxx-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutlsxx28-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:gnutls-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls-devel-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls30-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls30-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls30-hmac-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls30-hmac-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutlsxx-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutlsxx28-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.1:libgnutls30-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.1:libgnutls30-hmac-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.2:gnutls-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.2:libgnutls30-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.2:libgnutls30-hmac-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:gnutls-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls-devel-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls30-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls30-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls30-hmac-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls30-hmac-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutlsxx-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutlsxx28-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:gnutls-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls-devel-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls30-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls30-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls30-hmac-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls30-hmac-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutlsxx-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutlsxx28-3.6.7-150200.14.37.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2025/suse-su-202502583-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-32988.html</URL>
        <Description>CVE-2025-32988</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1246232</URL>
        <Description>SUSE Bug 1246232</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service (DoS) that could potentially crash the system.</Note>
    </Notes>
    <CVE>CVE-2025-32990</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7.1:gnutls-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutls-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutls-devel-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutls30-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutls30-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutls30-hmac-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutls30-hmac-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutlsxx-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutlsxx28-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:gnutls-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls-devel-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls30-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls30-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls30-hmac-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls30-hmac-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutlsxx-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutlsxx28-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.1:libgnutls30-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.1:libgnutls30-hmac-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.2:gnutls-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.2:libgnutls30-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.2:libgnutls30-hmac-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:gnutls-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls-devel-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls30-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls30-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls30-hmac-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls30-hmac-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutlsxx-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutlsxx28-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:gnutls-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls-devel-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls30-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls30-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls30-hmac-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls30-hmac-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutlsxx-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutlsxx28-3.6.7-150200.14.37.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2025/suse-su-202502583-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-32990.html</URL>
        <Description>CVE-2025-32990</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1246267</URL>
        <Description>SUSE Bug 1246267</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().</Note>
    </Notes>
    <CVE>CVE-2025-6395</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7.1:gnutls-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutls-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutls-devel-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutls30-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutls30-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutls30-hmac-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutls30-hmac-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutlsxx-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libgnutlsxx28-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:gnutls-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls-devel-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls30-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls30-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls30-hmac-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutls30-hmac-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutlsxx-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libgnutlsxx28-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.1:libgnutls30-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.1:libgnutls30-hmac-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.2:gnutls-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.2:libgnutls30-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.2:libgnutls30-hmac-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:gnutls-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls-devel-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls30-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls30-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls30-hmac-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutls30-hmac-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutlsxx-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libgnutlsxx28-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:gnutls-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls-devel-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls30-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls30-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls30-hmac-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutls30-hmac-32bit-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutlsxx-devel-3.6.7-150200.14.37.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libgnutlsxx28-3.6.7-150200.14.37.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2025/suse-su-202502583-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-6395.html</URL>
        <Description>CVE-2025-6395</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1246299</URL>
        <Description>SUSE Bug 1246299</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
