tocsin

Debian/gnutls28: low 3.7

A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker to potentially leak sensitive informati

Action: Upgrade gnutls28 to 3.7.9-2+deb12u7 or later.

Affected

introducedfixedlast affected
03.7.9-2+deb12u7-

Fixed versions

3.7.9-2+deb12u7

Sources

published · modified · JSON