SUSE-SU-2026:4953-1: Security update for gnutls
Published Oct 30, 2026
·Updated
This update for gnutls fixes the following issue:
- CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a large number of name constraints and subject alternative names (bsc#1257960).
Other sources
This update for gnutls fixes the following issue: CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a large number of name constraints and subject alternative names (bsc#1257960).
— SUSE
Affected Software
7 affected componentsFixes available
suse/gnutls<3.4.17-8.29.1
3.4.17-8.29.1
All of the following
SUSE SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64)
Any of the following
suse/libgnutls30-debuginfo<32bit-3.4.17-8.29.1
32bit-3.4.17-8.29.1
suse/libgnutls30-debuginfo<3.4.17-8.29.1
3.4.17-8.29.1
suse/libgnutls30<32bit-3.4.17-8.29.1
32bit-3.4.17-8.29.1
suse/gnutls-debugsource<3.4.17-8.29.1
3.4.17-8.29.1
suse/libgnutls30<3.4.17-8.29.1
3.4.17-8.29.1
Event History
Oct 30, 2026
Advisory Published
via OSV·04:18 PM
Data Sourced
via OSV·04:18 PM
DescriptionAffected Software
Advisory Published
via SUSE·04:18 PM
Data Sourced
via SUSE·04:18 PM
RemedyDescriptionSeverityAffected Software