Source: gnutls28 Version: 3.8.2-1 Severity: important Tags: security upstream Forwarded: https://gitlab.com/gnutls/gnutls/-/issues/1522 X-Debbugs-Cc: car...@debian.org, Debian Security Team <t...@security.debian.org> Control: found -1 3.7.9-2+deb12u1 Control: found -1 3.7.1-5+deb11u4
Hi, The following vulnerability was published for gnutls28. CVE-2024-0553[0]: | A vulnerability was found in GnuTLS. The response times to malformed | ciphertexts in RSA-PSK ClientKeyExchange differ from response times | of ciphertexts with correct PKCS#1 v1.5 padding. This issue may | allow a remote attacker to perform a timing side-channel attack in | the RSA-PSK key exchange, potentially leading to the leakage of | sensitive data. CVE-2024-0553 is designated as an incomplete | resolution for CVE-2023-5981. Note, that the CVE exists because of an incomplete fix for CVE-2023-5981. So strictly speaking the bullseye version is not yet released in stable, and so if we do a complete fix with a followup, then strictly speaking gnutls28 in bullseye won't be affected. OTOH the gnutls28 version with the incomplete fix is already in bullseye-proposed-updates, so guess it's safe to track it as it's done now. If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2024-0553 https://www.cve.org/CVERecord?id=CVE-2024-0553 [1] https://gitlab.com/gnutls/gnutls/-/issues/1522 [2] https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html Regards, Salvatore
