SUSE-SU-2026:20708-1

Add the functionality to allow to specify the hash algorithm for the PSK. This fixes a bug in the current implementation where the binder is always calculated with SHA256.

(bsc#1258083, jsc#PED-15752, jsc#PED-15753)
lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
tests/psk-file: Add testing for _credentials2 functions
lib/psk: add null check for binder algo
pre_shared_key: fix memleak when retrying with different binder algo
pre_shared_key: add null check on pskcred

Security fix:

CVE-2025-14831: DoS via excessive resource consumption during certificate verification (bsc#1257960)

References

Affected packages

SUSE:Linux Micro 6.0 / gnutls

Package

Name: gnutls
Purl: pkg:rpm/suse/gnutls&distro=SUSE%20Linux%20Micro%206.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.8.3-6.1

Ecosystem specific

{
    "binaries":  [
        {
            "gnutls":  "3.8.3-6.1",
            "libgnutls30":  "3.8.3-6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20708-1.json"