tocsin

Alpine/gnutls: high 7.5

A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue

Action: Upgrade gnutls to 3.8.3-r0 or later.

Affected

introducedfixedlast affected
03.8.3-r0-

Fixed versions

3.8.3-r0

Sources

published · modified · JSON