shield Security update for gnutls

SUSE-SLE-Module-Basesystem-15-SP7-2026-829

This update for gnutls fixes the following issues: Security issue: - CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a large number of name constraints and subject alternative names (bsc#1257960). Other updates and bugfixes: - update libgnutls package to avoid binder getting calculated with SHA256 (bsc#1258083, jsc#PED-15752, jsc#PED-15753). - lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2 - tests/psk-file: Add testing for _credentials2 functions - lib/psk: add null check for binder algo - pre_shared_key: fix memleak when retrying with different binder algo - pre_shared_key: add null check on pskcred

• Release Date
  Mar 5 2026
• References
  Bugzilla: 1257960, 1258083
  CVEs: CVE-2025-14831
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.7 s390x

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.8.3-150600.4.17.1 lock rpm lock src

  libgnutls-devel
  Development package for the GnuTLS C API

  3.8.3-150600.4.17.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.8.3-150600.4.17.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.8.3-150600.4.17.1 lock rpm

  libgnutlsxx30
  C++ API for the GNU Transport Layer Security Library

  3.8.3-150600.4.17.1 lock rpm

Basesystem Module 15.7 aarch64

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.8.3-150600.4.17.1 lock rpm lock src

  libgnutls-devel
  Development package for the GnuTLS C API

  3.8.3-150600.4.17.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.8.3-150600.4.17.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.8.3-150600.4.17.1 lock rpm

  libgnutlsxx30
  C++ API for the GNU Transport Layer Security Library

  3.8.3-150600.4.17.1 lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.8.3-150600.4.17.1 lock rpm lock src

  libgnutls-devel
  Development package for the GnuTLS C API

  3.8.3-150600.4.17.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.8.3-150600.4.17.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.8.3-150600.4.17.1 lock rpm

  libgnutlsxx30
  C++ API for the GNU Transport Layer Security Library

  3.8.3-150600.4.17.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.8.3-150600.4.17.1 lock rpm lock src

  libgnutls-devel
  Development package for the GnuTLS C API

  3.8.3-150600.4.17.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.8.3-150600.4.17.1 lock rpm

  libgnutls30-32bit
  The GNU Transport Layer Security Library

  3.8.3-150600.4.17.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.8.3-150600.4.17.1 lock rpm

  libgnutlsxx30
  C++ API for the GNU Transport Layer Security Library

  3.8.3-150600.4.17.1 lock rpm