{"id":"CLSA-2025-1752238368","aliases":[],"status":"published","title":"Update of gnutls","description":"- Fix timing side-channel in deterministic ECDSA (RHEL-28958)\n- Fix potential crash during chain building/verification (RHEL-28953)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-07-11T12:52:52Z","modified":"2026-06-01T00:31:09Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls","fixed_in":["3.7.6-23.el9_2.tuxcare.4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-c++","fixed_in":["3.7.6-23.el9_2.tuxcare.4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-dane","fixed_in":["3.7.6-23.el9_2.tuxcare.4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-devel","fixed_in":["3.7.6-23.el9_2.tuxcare.4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-utils","fixed_in":["3.7.6-23.el9_2.tuxcare.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.4"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1752238368.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2025-1752238368","title":"Update of gnutls","description":"- Fix timing side-channel in deterministic ECDSA (RHEL-28958)\n- Fix potential crash during chain building/verification (RHEL-28953)","status":"published","published":"2025-07-11T12:52:52Z","modified":"2026-06-01T00:31:09.033908607Z","updated_at":"2026-11-02T15:43:42.025438Z"}]}}