Описание
Security update for gnutls
This update for gnutls fixes the following issue:
- CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a large number of name constraints and subject alternative names (bsc#1257960).
Список пакетов
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
libgnutls30-3.4.17-8.29.1
libgnutls30-32bit-3.4.17-8.29.1
Ссылки
- Link for SUSE-SU-2026:4953-1
- E-Mail link for SUSE-SU-2026:4953-1
- SUSE Security Ratings
- SUSE Bug 1257960
- SUSE CVE CVE-2025-14831 page
Описание
A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).
Затронутые продукты
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libgnutls30-3.4.17-8.29.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libgnutls30-32bit-3.4.17-8.29.1
Ссылки
- CVE-2025-14831
- SUSE Bug 1257960