Debian/gnutls28: high 7.4
A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a networ
Action: Upgrade gnutls28 to 3.7.8-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.7.8-5 | - |
Fixed versions
| 3.7.8-5 |
Sources
- osv: DEBIAN-CVE-2023-0361#Debian:14/gnutls28
- https://security-tracker.debian.org/tracker/CVE-2023-0361
published · modified · JSON