Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:4943-1

Опубликовано: 29 окт. 2026
Источник: suse-cvrf

Описание

Security update for gnutls

This update for gnutls fixes the following issue:

  • CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a large number of name constraints and subject alternative names (bsc#1257960).

Список пакетов

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
gnutls-3.3.27-3.24.1
libgnutls-devel-3.3.27-3.24.1
libgnutls-openssl-devel-3.3.27-3.24.1
libgnutls-openssl27-3.3.27-3.24.1
libgnutls28-3.3.27-3.24.1
libgnutls28-32bit-3.3.27-3.24.1
libgnutlsxx-devel-3.3.27-3.24.1

Ссылки

Описание

A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).

Затронутые продукты
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gnutls-3.3.27-3.24.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libgnutls-devel-3.3.27-3.24.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libgnutls-openssl-devel-3.3.27-3.24.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libgnutls-openssl27-3.3.27-3.24.1
Ссылки