Alpine/gnutls: high 7.4
A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a networ
Action: Upgrade gnutls to 3.8.0-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.8.0-r0 | - |
Fixed versions
| 3.8.0-r0 |
Sources
published · modified · JSON