tocsin

Alpine/gnutls: low 3.7

A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker to potentially leak sensitive informati

Action: Upgrade gnutls to 3.8.13-r0 or later.

Affected

introducedfixedlast affected
03.8.13-r0-

Fixed versions

3.8.13-r0

Sources

published · modified · JSON