shield Security update for gnutls

SUSE-SLES-16.0-464

This update for gnutls fixes the following issues: - CVE-2025-14831: Fixed DoS via excessive resource consumption during certificate verification. (bsc#1257960) - CVE-2025-9820: Fixed a buffer overflow in gnutls_pkcs11_token_init. (bsc#1254132) - Add the functionality to allow to specify the hash algorithm for the PSK. This fixes a bug in the current implementation where the binder is always calculated with SHA256. (bsc#1258083, jsc#PED-15752, jsc#PED-15753)

• Release Date
  Mar 30 2026
• References
  Bugzilla: 1257960, 1254132, 1258083
  CVEs: CVE-2025-14831, CVE-2025-9820
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.8.10-160000.2.1 lock rpm

  libgnutls-devel
  Development package for the GnuTLS C API

  3.8.10-160000.2.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.8.10-160000.2.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.8.10-160000.2.1 lock rpm

  libgnutlsxx30
  C++ API for the GNU Transport Layer Security Library

  3.8.10-160000.2.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.8.10-160000.2.1 lock rpm

  libgnutls-devel
  Development package for the GnuTLS C API

  3.8.10-160000.2.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.8.10-160000.2.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.8.10-160000.2.1 lock rpm

  libgnutlsxx30
  C++ API for the GNU Transport Layer Security Library

  3.8.10-160000.2.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.8.10-160000.2.1 lock rpm

  libgnutls-devel
  Development package for the GnuTLS C API

  3.8.10-160000.2.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.8.10-160000.2.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.8.10-160000.2.1 lock rpm

  libgnutlsxx30
  C++ API for the GNU Transport Layer Security Library

  3.8.10-160000.2.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.8.10-160000.2.1 lock rpm

  libgnutls-devel
  Development package for the GnuTLS C API

  3.8.10-160000.2.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.8.10-160000.2.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.8.10-160000.2.1 lock rpm

  libgnutlsxx30
  C++ API for the GNU Transport Layer Security Library

  3.8.10-160000.2.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.8.10-160000.2.1 lock rpm

  libgnutls-devel
  Development package for the GnuTLS C API

  3.8.10-160000.2.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.8.10-160000.2.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.8.10-160000.2.1 lock rpm

  libgnutlsxx30
  C++ API for the GNU Transport Layer Security Library

  3.8.10-160000.2.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  gnutls
  The GNU Transport Layer Security Library

  3.8.10-160000.2.1 lock rpm

  libgnutls-devel
  Development package for the GnuTLS C API

  3.8.10-160000.2.1 lock rpm

  libgnutls30
  The GNU Transport Layer Security Library

  3.8.10-160000.2.1 lock rpm

  libgnutlsxx-devel
  Development package for the GnuTLS C++ API

  3.8.10-160000.2.1 lock rpm

  libgnutlsxx30
  C++ API for the GNU Transport Layer Security Library

  3.8.10-160000.2.1 lock rpm