{"id":"CLSA-2025-1749479602","summary":"gnutls: Fix of 3 CVEs","details":"- Keep the broken pkcs11 tests disabled.\n- Added CVE-2024-0567 PoC test.\n- CVE-2023-5981-pre1: improve level of randomness for each operations,\n  always use _gnutls_switch_lib_state for pk wrappers.\n- CVE-2023-5981-pre2: add constant time/cache operations to prevent\n  or minimaze timining or cache side channel attacks.\n- CVE-2023-5981: removes branching that depends on secret data to\n  prevent potential side-channel attack.\n- CVE-2024-0553: minimize branching after decryption.","modified":"2026-05-27T11:35:58.549185283Z","published":"2025-06-09T14:33:27Z","upstream":["CVE-2023-5981","CVE-2024-0553","CVE-2024-0567"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1749479602.html"}],"affected":[{"package":{"name":"gnutls","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/gnutls?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1749479602.json"}},{"package":{"name":"gnutls-c++","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/gnutls-c++?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1749479602.json"}},{"package":{"name":"gnutls-dane","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/gnutls-dane?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1749479602.json"}},{"package":{"name":"gnutls-devel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/gnutls-devel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1749479602.json"}},{"package":{"name":"gnutls-utils","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/gnutls-utils?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1749479602.json"}}],"schema_version":"1.7.5"}