SUSE-SU-2026:0829-1

Опубликовано: 05 мар. 2026

Источник: suse-cvrf

Описание

Security update for gnutls

This update for gnutls fixes the following issues:

Security issue:

CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a large number of name constraints and subject alternative names (bsc#1257960).

Other updates and bugfixes:

update libgnutls package to avoid binder getting calculated with SHA256 (bsc#1258083, jsc#PED-15752, jsc#PED-15753).
lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
tests/psk-file: Add testing for _credentials2 functions
lib/psk: add null check for binder algo
pre_shared_key: fix memleak when retrying with different binder algo
pre_shared_key: add null check on pskcred

Список пакетов

Container bci/php-apache:latest

libgnutls30-3.8.3-150600.4.17.1

Container bci/php-fpm:latest

libgnutls30-3.8.3-150600.4.17.1

Container bci/php:latest

libgnutls30-3.8.3-150600.4.17.1

Container bci/spack:latest

libgnutls30-3.8.3-150600.4.17.1

Container suse/kiosk/firefox-esr:latest

libgnutls30-3.8.3-150600.4.17.1

Container suse/manager/5.0/x86_64/server:latest

libgnutls30-3.8.3-150600.4.17.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest

libgnutls30-3.8.3-150600.4.17.1

Container suse/samba-client:latest

libgnutls30-3.8.3-150600.4.17.1

Container suse/samba-server:latest

libgnutls30-3.8.3-150600.4.17.1

Container suse/samba-toolbox:latest

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-Azure-3P

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-Azure-Basic

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-Azure-Standard

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-BYOS

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-BYOS-Azure

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-BYOS-EC2

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-BYOS-GCE

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-CHOST-BYOS

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-CHOST-BYOS-Azure

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-CHOST-BYOS-EC2

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-CHOST-BYOS-GCE

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-CHOST-BYOS-GDC

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-EC2

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-EC2-ECS-HVM

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-GCE

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-HPC

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-HPC-Azure

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-HPC-BYOS

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-HPC-BYOS-Azure

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-HPC-BYOS-EC2

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-HPC-BYOS-GCE

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-HPC-EC2

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-HPC-GCE

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-Hardened-BYOS

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-Hardened-BYOS-Azure

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-Hardened-BYOS-EC2

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-Hardened-BYOS-GCE

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-Azure

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-Azure-3P

gnutls-3.8.3-150600.4.17.1

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-BYOS

gnutls-3.8.3-150600.4.17.1

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-BYOS-Azure

gnutls-3.8.3-150600.4.17.1

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-BYOS-EC2

gnutls-3.8.3-150600.4.17.1

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-BYOS-GCE

gnutls-3.8.3-150600.4.17.1

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-EC2

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-GCE

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-Hardened

gnutls-3.8.3-150600.4.17.1

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-Hardened-Azure

gnutls-3.8.3-150600.4.17.1

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-Hardened-BYOS

gnutls-3.8.3-150600.4.17.1

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

gnutls-3.8.3-150600.4.17.1

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

gnutls-3.8.3-150600.4.17.1

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

gnutls-3.8.3-150600.4.17.1

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-Hardened-EC2

gnutls-3.8.3-150600.4.17.1

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAP-Hardened-GCE

gnutls-3.8.3-150600.4.17.1

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAPCAL

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAPCAL-Azure

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAPCAL-EC2

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP6-SAPCAL-GCE

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-Azure-3P

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-Azure-Basic

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-Azure-Standard

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-BYOS-Azure

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-BYOS-EC2

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-BYOS-GCE

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-CHOST-BYOS-Aliyun

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-CHOST-BYOS-Azure

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-CHOST-BYOS-EC2

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-CHOST-BYOS-GCE

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-CHOST-BYOS-GDC

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-EC2

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-EC2-ECS-HVM

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-GCE

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-GCE-3P

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-HPC-Azure

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-HPC-BYOS-Azure

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-HPC-BYOS-EC2

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-HPC-BYOS-GCE

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-Hardened-BYOS-Azure

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-Hardened-BYOS-EC2

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-Hardened-BYOS-GCE

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-SAP-Azure

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-SAP-Azure-3P

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-SAP-Azure-LI-BYOS-Production

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-SAP-BYOS-Azure

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-SAP-BYOS-EC2

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-SAP-BYOS-GCE

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-SAP-EC2

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-SAP-GCE

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-SAP-GCE-3P

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-SAP-Hardened-Azure

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-SAP-Hardened-GCE

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-SAPCAL-Azure

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-SAPCAL-EC2

libgnutls30-3.8.3-150600.4.17.1

Image SLES15-SP7-SAPCAL-GCE

libgnutls30-3.8.3-150600.4.17.1

Image server-image

libgnutls30-3.8.3-150600.4.17.1

Image server-image-sles15sp7

libgnutls30-3.8.3-150600.4.17.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

gnutls-3.8.3-150600.4.17.1

libgnutls-devel-3.8.3-150600.4.17.1

libgnutls30-3.8.3-150600.4.17.1

libgnutls30-32bit-3.8.3-150600.4.17.1

libgnutlsxx-devel-3.8.3-150600.4.17.1

libgnutlsxx30-3.8.3-150600.4.17.1

openSUSE Leap 15.6

gnutls-3.8.3-150600.4.17.1

libgnutls-devel-3.8.3-150600.4.17.1

libgnutls-devel-32bit-3.8.3-150600.4.17.1

libgnutls30-3.8.3-150600.4.17.1

libgnutls30-32bit-3.8.3-150600.4.17.1

libgnutlsxx-devel-3.8.3-150600.4.17.1

libgnutlsxx30-3.8.3-150600.4.17.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20260829-1/
Link for SUSE-SU-2026:0829-1
https://lists.suse.com/pipermail/sle-security-updates/2026-March/024630.html
E-Mail link for SUSE-SU-2026:0829-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1257960
SUSE Bug 1257960
https://bugzilla.suse.com/1258083
SUSE Bug 1258083
https://www.suse.com/security/cve/CVE-2025-14831/
SUSE CVE CVE-2025-14831 page

Описание

A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).

Затронутые продукты

Container bci/php-apache:latest:libgnutls30-3.8.3-150600.4.17.1

Container bci/php-fpm:latest:libgnutls30-3.8.3-150600.4.17.1

Container bci/php:latest:libgnutls30-3.8.3-150600.4.17.1

Container bci/spack:latest:libgnutls30-3.8.3-150600.4.17.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-14831.html
CVE-2025-14831
https://bugzilla.suse.com/1257960
SUSE Bug 1257960