SUSE-SU-2026:3042-1

Опубликовано: 15 июл. 2026

Источник: suse-cvrf

Описание

Security update for gnutls

This update for gnutls fixes the following issue

Rebase the CVE-2026-42014 patch to include a missing call to p11_kit_uri_free() in gnutls_pkcs11_token_set_pin() (bsc#1263713).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

gnutls-3.7.3-150400.4.62.1

libgnutls-devel-3.7.3-150400.4.62.1

libgnutls30-3.7.3-150400.4.62.1

libgnutls30-32bit-3.7.3-150400.4.62.1

libgnutls30-hmac-3.7.3-150400.4.62.1

libgnutls30-hmac-32bit-3.7.3-150400.4.62.1

libgnutlsxx-devel-3.7.3-150400.4.62.1

libgnutlsxx28-3.7.3-150400.4.62.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

gnutls-3.7.3-150400.4.62.1

libgnutls-devel-3.7.3-150400.4.62.1

libgnutls30-3.7.3-150400.4.62.1

libgnutls30-32bit-3.7.3-150400.4.62.1

libgnutls30-hmac-3.7.3-150400.4.62.1

libgnutls30-hmac-32bit-3.7.3-150400.4.62.1

libgnutlsxx-devel-3.7.3-150400.4.62.1

libgnutlsxx28-3.7.3-150400.4.62.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

gnutls-3.7.3-150400.4.62.1

gnutls-guile-3.7.3-150400.4.62.1

libgnutls-devel-3.7.3-150400.4.62.1

libgnutls30-3.7.3-150400.4.62.1

libgnutls30-32bit-3.7.3-150400.4.62.1

libgnutls30-hmac-3.7.3-150400.4.62.1

libgnutls30-hmac-32bit-3.7.3-150400.4.62.1

libgnutlsxx-devel-3.7.3-150400.4.62.1

libgnutlsxx28-3.7.3-150400.4.62.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

gnutls-3.7.3-150400.4.62.1

gnutls-guile-3.7.3-150400.4.62.1

libgnutls-devel-3.7.3-150400.4.62.1

libgnutls30-3.7.3-150400.4.62.1

libgnutls30-32bit-3.7.3-150400.4.62.1

libgnutls30-hmac-3.7.3-150400.4.62.1

libgnutls30-hmac-32bit-3.7.3-150400.4.62.1

libgnutlsxx-devel-3.7.3-150400.4.62.1

libgnutlsxx28-3.7.3-150400.4.62.1

SUSE Linux Enterprise Micro 5.4

gnutls-3.7.3-150400.4.62.1

libgnutls30-3.7.3-150400.4.62.1

libgnutls30-hmac-3.7.3-150400.4.62.1

SUSE Linux Enterprise Micro 5.5

gnutls-3.7.3-150400.4.62.1

libgnutls30-3.7.3-150400.4.62.1

libgnutls30-hmac-3.7.3-150400.4.62.1

SUSE Linux Enterprise Server 15 SP4-LTSS

gnutls-3.7.3-150400.4.62.1

libgnutls-devel-3.7.3-150400.4.62.1

libgnutls30-3.7.3-150400.4.62.1

libgnutls30-32bit-3.7.3-150400.4.62.1

libgnutls30-hmac-3.7.3-150400.4.62.1

libgnutls30-hmac-32bit-3.7.3-150400.4.62.1

libgnutlsxx-devel-3.7.3-150400.4.62.1

libgnutlsxx28-3.7.3-150400.4.62.1

SUSE Linux Enterprise Server 15 SP5-LTSS

gnutls-3.7.3-150400.4.62.1

gnutls-guile-3.7.3-150400.4.62.1

libgnutls-devel-3.7.3-150400.4.62.1

libgnutls30-3.7.3-150400.4.62.1

libgnutls30-32bit-3.7.3-150400.4.62.1

libgnutls30-hmac-3.7.3-150400.4.62.1

libgnutls30-hmac-32bit-3.7.3-150400.4.62.1

libgnutlsxx-devel-3.7.3-150400.4.62.1

libgnutlsxx28-3.7.3-150400.4.62.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

gnutls-3.7.3-150400.4.62.1

libgnutls-devel-3.7.3-150400.4.62.1

libgnutls30-3.7.3-150400.4.62.1

libgnutls30-32bit-3.7.3-150400.4.62.1

libgnutls30-hmac-3.7.3-150400.4.62.1

libgnutls30-hmac-32bit-3.7.3-150400.4.62.1

libgnutlsxx-devel-3.7.3-150400.4.62.1

libgnutlsxx28-3.7.3-150400.4.62.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

gnutls-3.7.3-150400.4.62.1

gnutls-guile-3.7.3-150400.4.62.1

libgnutls-devel-3.7.3-150400.4.62.1

libgnutls30-3.7.3-150400.4.62.1

libgnutls30-32bit-3.7.3-150400.4.62.1

libgnutls30-hmac-3.7.3-150400.4.62.1

libgnutls30-hmac-32bit-3.7.3-150400.4.62.1

libgnutlsxx-devel-3.7.3-150400.4.62.1

libgnutlsxx28-3.7.3-150400.4.62.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20263042-1/
Link for SUSE-SU-2026:3042-1
https://lists.suse.com/pipermail/sle-updates/2026-July/048290.html
E-Mail link for SUSE-SU-2026:3042-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1263713
SUSE Bug 1263713
https://www.suse.com/security/cve/CVE-2026-42014/
SUSE CVE CVE-2026-42014 page

Описание

A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path.

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gnutls-3.7.3-150400.4.62.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libgnutls-devel-3.7.3-150400.4.62.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libgnutls30-3.7.3-150400.4.62.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libgnutls30-32bit-3.7.3-150400.4.62.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-42014.html
CVE-2026-42014
https://bugzilla.suse.com/1263713
SUSE Bug 1263713

SUSE-SU-2026:3042-1

Описание

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

SUSE Linux Enterprise Micro 5.4

SUSE Linux Enterprise Micro 5.5

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server 15 SP5-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Linux Enterprise Server for SAP Applications 15 SP5

Ссылки

Уязвимость: CVE-2026-42014

Описание

Затронутые продукты

Ссылки