{"action":"Upgrade gnutls28 to 3.0.22-3 or later.","affected":[{"fixed":"3.0.22-3","introduced":"0"}],"component":"gnutls28","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["3.0.22-3"],"id":"tcs_01M5NAAGT6J0770RXMMG411FPP","modified_at":"2026-09-01T20:03:14.873453541Z","published_at":"2013-02-08T19:55:01.157Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2013-1619","https://security-tracker.debian.org/tracker/CVE-2013-1619"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2013-1619","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2013-1619"}],"summary":"The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the pro"}