Alerts This Week
Warning Icon 1 1,149
Alerts This Week
Warning Icon 1 1,149

SUSE Linux Enterprise 15 SP7 GnuTLS Moderate Resource Fix SUSE-2026-0829-1

suse
Calendar Grey March 5, 2026
Dist Suse Esm H88
An update addressing one issue and enhancing features in gnutls is available with a moderate risk rating for users.
An update that solves one vulnerability, contains two features and has one security fix can now be installed.

Summary

## This update for gnutls fixes the following issues: Security issue: * CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a large number of name constraints and subject alternative names (bsc#1257960). Other updates and bugfixes: * update libgnutls package to avoid binder getting calculated with SHA256 (bsc#1258083, jsc#PED-15752, jsc#PED-15753). * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2 * tests/psk-file: Add testing for _credentials2 functions * lib/psk: add null check for binder algo * pre_shared_key: fix memleak when retrying with different binder algo * pre_shared_key: add null check on pskcred ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like

Topics%20covered

Topics Covered

security advisory moderate SuSE DoS gnutls resource consumption

References

* bsc#1257960

* bsc#1258083

* jsc#PED-15752

* jsc#PED-15753

Cross-

* CVE-2025-14831

CVSS scores:

* CVE-2025-14831 ( SUSE ): 6.9

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

* CVE-2025-14831 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

* CVE-2025-14831 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected Products:

* Basesystem Module 15-SP7

* openSUSE Leap 15.6

* SUSE Linux Enterprise Desktop 15 SP7

* SUSE Linux Enterprise Real Time 15 SP7

* SUSE Linux Enterprise Server 15 SP7

* SUSE Linux Enterprise Server for SAP Applications 15 SP7

An update that solves one vulnerability, contains two features and has one

security fix can now be installed.

##

* https://www.suse.com/security/cve/CVE-2025-14831.html

Announcement ID: SUSE-SU-2026:0829-1
Release Date: 2026-03-05T15:17:14Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate SuSE DoS gnutls resource consumption

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here