{"id":"CLSA-2024-1734368297","summary":"gnutls: Fix of 3 CVEs","details":"- Keep the broken pkcs11 tests disabled.\n- Added CVE-2024-0567 PoC test.\n- CVE-2023-5981-pre1: improve level of randomness for each operations,\n  always use _gnutls_switch_lib_state for pk wrappers.\n- CVE-2023-5981-pre2: add constant time/cache operations to prevent\n  or minimaze timining or cache side channel attacks.\n- CVE-2023-5981: removes branching that depends on secret data to\n  prevent potential side-channel attack.\n- CVE-2024-0553: minimize branching after decryption.","modified":"2026-05-27T11:33:27.903133117Z","published":"2024-12-16T16:58:23Z","upstream":["CVE-2023-5981","CVE-2024-0553","CVE-2024-0567"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/oraclelinux7-els/CLSA-2024-1734368297.html"}],"affected":[{"package":{"name":"gnutls","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/gnutls?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2024-1734368297.json"}},{"package":{"name":"gnutls-c++","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/gnutls-c++?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2024-1734368297.json"}},{"package":{"name":"gnutls-dane","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/gnutls-dane?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2024-1734368297.json"}},{"package":{"name":"gnutls-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/gnutls-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2024-1734368297.json"}},{"package":{"name":"gnutls-utils","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/gnutls-utils?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2024-1734368297.json"}}],"schema_version":"1.7.5"}