File _patchinfo of Package patchinfo.42640

<patchinfo incident="42640">
  <issue tracker="cve" id="2025-14831"/>
  <issue tracker="bnc" id="1257960">VUL-0: CVE-2025-14831: gnutls: excessive resource consumption when verifying  specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs)</issue>
  <issue tracker="bnc" id="1258083">[NetApp SLES15 SP7 Bug]: Update libgnutls package to avoid binder always getting calculated with SHA256</issue>
  <issue tracker="jsc" id="PED-15752"/>
  <issue tracker="jsc" id="PED-15753"/>
  <packager>pmonrealgonzalez</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for gnutls</summary>
  <description>This update for gnutls fixes the following issues:

Security issue:

- CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a
  large number of name constraints and subject alternative names (bsc#1257960).

Other updates and bugfixes:

- update libgnutls package to avoid binder getting calculated with SHA256 (bsc#1258083, jsc#PED-15752, jsc#PED-15753).
- lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
- tests/psk-file: Add testing for _credentials2 functions
- lib/psk: add null check for binder algo
- pre_shared_key: fix memleak when retrying with different binder algo
- pre_shared_key: add null check on pskcred
</description>
</patchinfo>