SUSE-SU-2026:0829-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20260829-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0829-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:0829-1
- Upstream
- Related
- Published
- 2026-03-05T15:17:09Z
- Modified
- 2026-03-06T15:30:06Z
- Summary
- Security update for gnutls
- Details
-
This update for gnutls fixes the following issues:
Security issue:
- CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a large number of name constraints and subject alternative names (bsc#1257960).
Other updates and bugfixes:
- update libgnutls package to avoid binder getting calculated with SHA256 (bsc#1258083, jsc#PED-15752, jsc#PED-15753).
- lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
- tests/psk-file: Add testing for _credentials2 functions
- lib/psk: add null check for binder algo
- pre_shared_key: fix memleak when retrying with different binder algo
- pre_shared_key: add null check on pskcred
- References
Affected packages
SUSE:Linux Enterprise Module for Basesystem 15 SP7 / gnutls
Package
- Name
- gnutls
- Purl
- pkg:rpm/suse/gnutls&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed3.8.3-150600.4.17.1
openSUSE:Leap 15.6 / gnutls
Package
- Name
- gnutls
- Purl
- pkg:rpm/opensuse/gnutls&distro=openSUSE%20Leap%2015.6
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed3.8.3-150600.4.17.1
Ecosystem specific
{
"binaries": [
{
"gnutls": "3.8.3-150600.4.17.1",
"libgnutls-devel": "3.8.3-150600.4.17.1",
"libgnutls-devel-32bit": "3.8.3-150600.4.17.1",
"libgnutls30": "3.8.3-150600.4.17.1",
"libgnutls30-32bit": "3.8.3-150600.4.17.1",
"libgnutlsxx-devel": "3.8.3-150600.4.17.1",
"libgnutlsxx30": "3.8.3-150600.4.17.1"
}
]
}