{"id":"CVE-2023-5981","aliases":["ALPINE-CVE-2023-5981","ALSA-2024:0155","ALSA-2024:0533","ALSA-2024:0627","AZL-32048","BELL-CVE-2023-5981","CLSA-2024-1707419801","CLSA-2024-1708029216","CLSA-2024-1708029490","CLSA-2024-1708029809","CLSA-2024-1710184399","CLSA-2024-1734368297","CLSA-2025-1749479602","CLSA-2026-1791621767","DEBIAN-CVE-2023-5981","DLA-3660-1","EUVD-2023-58248","GHSA-jvj3-gqjm-cg8p","JLSEC-2026-524","MGASA-2024-0008","OESA-2023-1867","RHSA-2024:0155","RHSA-2024:0319","RHSA-2024:0399","RHSA-2024:0451","RHSA-2024:0533","RLSA-2024:0155","SUSE-SU-2023:4952-1","SUSE-SU-2023:4983-1","SUSE-SU-2023:4986-1","SUSE-SU-2024:0860-1","SUSE-SU-2024:1179-1","UBUNTU-CVE-2023-5981","USN-6499-1","USN-6499-2","openSUSE-SU-2024:13444-1"],"status":"published","title":"Gnutls: timing side-channel in the rsa-psk authentication","description":"A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01267,"percentile":0.70003,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-203","CWE-208"],"published":"2023-11-17T00:00:00Z","modified":"2026-11-05T21:16:09Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"gnutls","fixed_in":["3.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"gnutls","fixed_in":["3.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"gnutls","fixed_in":["3.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"gnutls","fixed_in":["3.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"gnutls","fixed_in":["3.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"gnutls","fixed_in":["3.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"gnutls","fixed_in":["3.8.3-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gnutls","fixed_in":["3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gnutls-c++","fixed_in":["3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gnutls-dane","fixed_in":["3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gnutls-devel","fixed_in":["3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gnutls-utils","fixed_in":["3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"gnutls","fixed_in":["3.7.11-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"gnutls","fixed_in":["3.7.8-r4"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"gnutls","fixed_in":["3.8.3-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gnutls-bin","fixed_in":["3.5.18-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gnutls-doc","fixed_in":["3.5.18-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libgnutls-dane0","fixed_in":["3.5.18-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libgnutls-openssl27","fixed_in":["3.5.18-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libgnutls28-dev","fixed_in":["3.5.18-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libgnutls30","fixed_in":["3.5.18-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libgnutlsxx28","fixed_in":["3.5.18-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"gnutls28","fixed_in":["3.7.9-2+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gnutls28","fixed_in":["3.8.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gnutls28","fixed_in":["3.8.2-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"gnutls28","fixed_in":["3.6.7-4+deb10u11"],"sources":["osv"]},{"ecosystem":"Julia","package":"GnuTLS_jll","fixed_in":["3.8.3+0"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"gnutls","fixed_in":["3.8.0-2.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"gnutls","fixed_in":["3.6.14-13.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"gnutls","fixed_in":["3.6.14-13.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"gnutls","fixed_in":["3.7.2-10.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"gnutls","fixed_in":["3.7.2-10.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"gnutls","fixed_in":["3.7.2-10.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++","fixed_in":["0:3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane","fixed_in":["0:3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debuginfo","fixed_in":["0:3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debugsource","fixed_in":["0:3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-devel","fixed_in":["0:3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils","fixed_in":["0:3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls","fixed_in":["0:3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debuginfo","fixed_in":["0:3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debugsource","fixed_in":["0:3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-c++","fixed_in":["0:3.6.16-5.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.16-5.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-dane","fixed_in":["0:3.6.16-5.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.16-5.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-debuginfo","fixed_in":["0:3.6.16-5.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-debugsource","fixed_in":["0:3.6.16-5.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-devel","fixed_in":["0:3.6.16-5.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-utils","fixed_in":["0:3.6.16-5.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.16-5.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls","fixed_in":["0:3.6.16-5.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.16-5.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.16-5.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-debuginfo","fixed_in":["0:3.6.16-5.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-debugsource","fixed_in":["0:3.6.16-5.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.16-5.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-c++","fixed_in":["0:3.6.16-7.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.16-7.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-dane","fixed_in":["0:3.6.16-7.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.16-7.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-debuginfo","fixed_in":["0:3.6.16-7.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-debugsource","fixed_in":["0:3.6.16-7.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-devel","fixed_in":["0:3.6.16-7.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-utils","fixed_in":["0:3.6.16-7.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.16-7.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls","fixed_in":["0:3.6.16-7.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.16-7.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.16-7.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-debuginfo","fixed_in":["0:3.6.16-7.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-debugsource","fixed_in":["0:3.6.16-7.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.16-7.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-c++","fixed_in":["0:3.7.6-21.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-c++-debuginfo","fixed_in":["0:3.7.6-21.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-dane","fixed_in":["0:3.7.6-21.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-dane-debuginfo","fixed_in":["0:3.7.6-21.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-debuginfo","fixed_in":["0:3.7.6-21.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-debugsource","fixed_in":["0:3.7.6-21.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-devel","fixed_in":["0:3.7.6-21.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-utils","fixed_in":["0:3.7.6-21.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-utils-debuginfo","fixed_in":["0:3.7.6-21.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"gnutls","fixed_in":["0:3.7.6-21.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"gnutls-c++-debuginfo","fixed_in":["0:3.7.6-21.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"gnutls-dane-debuginfo","fixed_in":["0:3.7.6-21.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"gnutls-debuginfo","fixed_in":["0:3.7.6-21.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"gnutls-debugsource","fixed_in":["0:3.7.6-21.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"gnutls-utils-debuginfo","fixed_in":["0:3.7.6-21.el9_2.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"gnutls","fixed_in":["0:3.6.16-8.el8_9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"gnutls","fixed_in":["3.7.3-150400.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"gnutls","fixed_in":["3.7.3-150400.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"gnutls","fixed_in":["3.7.3-150400.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"gnutls","fixed_in":["3.7.3-150400.4.38.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"gnutls","fixed_in":["3.7.3-150400.4.38.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"gnutls","fixed_in":["3.7.3-150400.4.38.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"gnutls","fixed_in":["3.7.3-150400.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"gnutls","fixed_in":["3.6.7-150200.14.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"gnutls","fixed_in":["3.6.7-150200.14.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"gnutls","fixed_in":["3.6.7-150200.14.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"gnutls","fixed_in":["3.6.7-150200.14.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"gnutls","fixed_in":["3.6.7-150200.14.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"gnutls","fixed_in":["3.6.7-150200.14.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"gnutls","fixed_in":["3.6.7-150200.14.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"gnutls","fixed_in":["3.6.7-150200.14.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"gnutls","fixed_in":["3.6.7-150200.14.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"gnutls","fixed_in":["3.6.7-150200.14.28.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnutls28","fixed_in":["3.5.18-1ubuntu1.6+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"gnutls28","fixed_in":["3.6.13-2ubuntu1.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"gnutls28","fixed_in":["3.7.3-4ubuntu1.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"gnutls","fixed_in":["3.8.2-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.11-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.7.8-r2"},{"fixed":"3.7.8-r4"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.8.0-r3"},{"fixed":"3.8.3-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gnutls-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gnutls-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libgnutls-dane0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libgnutls-openssl27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libgnutls28-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libgnutls30","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libgnutlsxx28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els3"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-21.el9_2.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-21.el9_2.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-21.el9_2.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-21.el9_2.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-21.el9_2.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.29-9.el7_6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"gnutls-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.9+tuxcare.els5"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"gnutls-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.9+tuxcare.els5"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"guile-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.9+tuxcare.els5"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libgnutls-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.9+tuxcare.els5"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libgnutls-openssl27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.9+tuxcare.els5"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libgnutls28-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.9+tuxcare.els5"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libgnutls30","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.9+tuxcare.els5"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libgnutlsxx28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.9+tuxcare.els5"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.9-2+deb12u1"}]}],"versions":["3.7.9-2"]},{"source":"osv","ecosystem":"Debian:13","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.2-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-4+deb10u11"}]}],"versions":["3.6.7-4","3.6.7-4+deb10u1","3.6.7-4+deb10u10","3.6.7-4+deb10u2","3.6.7-4+deb10u3","3.6.7-4+deb10u4","3.6.7-4+deb10u5","3.6.7-4+deb10u6","3.6.7-4+deb10u7","3.6.7-4+deb10u8","3.6.7-4+deb10u9"]},{"source":"osv","ecosystem":"Julia","package":"GnuTLS_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.8.3+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-2.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.14-13.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.14-13.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-10.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-10.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-10.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150000.6.50.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150000.6.50.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150000.6.50.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.38.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.38.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.38.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-150200.14.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.1.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.15-5ubuntu2","3.3.18-1ubuntu1","3.3.20-1ubuntu1","3.4.9-2ubuntu1","3.4.10-4ubuntu1","3.4.10-4ubuntu1.1","3.4.10-4ubuntu1.2","3.4.10-4ubuntu1.3","3.4.10-4ubuntu1.4","3.4.10-4ubuntu1.5","3.4.10-4ubuntu1.6","3.4.10-4ubuntu1.7","3.4.10-4ubuntu1.8","3.4.10-4ubuntu1.9","3.4.10-4ubuntu1.9+esm1","3.4.10-4ubuntu1.9+esm2","3.4.10-4ubuntu1.9+esm3","3.4.10-4ubuntu1.9+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+esm1"}]}],"versions":["3.5.8-6ubuntu3","3.5.17-1ubuntu1","3.5.17-1ubuntu3","3.5.18-1ubuntu1","3.5.18-1ubuntu1.1","3.5.18-1ubuntu1.2","3.5.18-1ubuntu1.3","3.5.18-1ubuntu1.4","3.5.18-1ubuntu1.5","3.5.18-1ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.9"}]}],"versions":["3.6.9-5ubuntu1","3.6.9-5ubuntu2","3.6.10-5","3.6.11.1-2","3.6.11.1-2ubuntu2","3.6.13-2ubuntu1","3.6.13-2ubuntu1.1","3.6.13-2ubuntu1.2","3.6.13-2ubuntu1.3","3.6.13-2ubuntu1.6","3.6.13-2ubuntu1.7","3.6.13-2ubuntu1.8"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-4ubuntu1.3"}]}],"versions":["3.7.1-5ubuntu1","3.7.2-2ubuntu1","3.7.2-4ubuntu1","3.7.2-5ubuntu1","3.7.3-4ubuntu1","3.7.3-4ubuntu1.1","3.7.3-4ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.9"}]}],"versions":["3.6.9-5ubuntu1","3.6.9-5ubuntu2","3.6.10-5","3.6.11.1-2","3.6.11.1-2ubuntu2","3.6.13-2ubuntu1","3.6.13-2ubuntu1.1","3.6.13-2ubuntu1.2","3.6.13-2ubuntu1.3","3.6.13-2ubuntu1.6","3.6.13-2ubuntu1.7","3.6.13-2ubuntu1.8"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-4ubuntu1.3"}]}],"versions":["3.7.1-5ubuntu1","3.7.2-2ubuntu1","3.7.2-4ubuntu1","3.7.2-5ubuntu1","3.7.3-4ubuntu1","3.7.3-4ubuntu1.1","3.7.3-4ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.6+esm1"}]}],"versions":["3.5.8-6ubuntu3","3.5.17-1ubuntu1","3.5.17-1ubuntu3","3.5.18-1ubuntu1","3.5.18-1ubuntu1.1","3.5.18-1ubuntu1.2","3.5.18-1ubuntu1.3","3.5.18-1ubuntu1.4","3.5.18-1ubuntu1.5","3.5.18-1ubuntu1.6"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.2-1.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"gnu","product":"gnutls"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 extended update support"},{"vendor":"red hat","product":"rhodf-4.15-rhel-9"},{"vendor":"red hat","product":"rhol-5.8-rhel-9"},{"vendor":"redhat","product":"linux"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:0155","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0319","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0399","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0451","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0533","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1383","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2094","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5981","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Third Party Advisory","Vendor Advisory","report","advisory","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248445","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://gnutls.org/security-new.html#GNUTLS-SA-2023-10-23","tags":["x_transferred","Issue Tracking","Vendor Advisory","web","article","report"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/19/3","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/","tags":["x_transferred","Broken Link","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/","tags":["x_transferred","Broken Link","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/11/msg00016.html","tags":["Third Party Advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5981","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2"},{"url":"https://github.com/advisories/GHSA-jvj3-gqjm-cg8p"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-5981","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2248445","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-0155.html","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-0553","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-0567","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258412","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258544","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-0533.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0627","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-0627.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-5981","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1707419801.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2024-1708029216.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2024-1708029490.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1708029809.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1710184399.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/oraclelinux7-els/CLSA-2024-1734368297.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1749479602.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1791621767.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0553","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5981.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-5981","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0008.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32547","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2023/11/20/2","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1867","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0155.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5981","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0319.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0399.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0451.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258544","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0533.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-0553","tags":["advisory"]},{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1522","tags":["article"]},{"url":"https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-0567","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0567","tags":["advisory"]},{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1521","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2024:0155","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234952-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1208143","tags":["report"]},{"url":"https://bugzilla.suse.com/1217277","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-0361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5981","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234983-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234986-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240860-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1218865","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0553","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241179-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1202146","tags":["report"]},{"url":"https://bugzilla.suse.com/1203299","tags":["report"]},{"url":"https://bugzilla.suse.com/1203779","tags":["report"]},{"url":"https://bugzilla.suse.com/1207183","tags":["report"]},{"url":"https://bugzilla.suse.com/1207346","tags":["report"]},{"url":"https://bugzilla.suse.com/1208146","tags":["report"]},{"url":"https://bugzilla.suse.com/1208237","tags":["report"]},{"url":"https://bugzilla.suse.com/1209001","tags":["report"]},{"url":"https://bugzilla.suse.com/1218862","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0567","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-5981","tags":["report"]},{"url":"https://lists.gnupg.org/pipermail/gnutls-help/2023-November/004837.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6499-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6499-2","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-5981","title":"Gnutls: timing side-channel in the rsa-psk authentication","description":"A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.","status":"published","published":"2023-11-28T11:49:50.138Z","modified":"2026-11-05T11:36:28.776Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-208"],"updated_at":"2026-11-05T13:18:22.408512Z"}],"euvd":[{"id":"EUVD-2023-58248","description":"A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.","status":"published","published":"2023-11-28T11:49:50Z","modified":"2026-11-05T11:36:28Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-05T13:14:14.11293Z"}],"ghsa":[{"id":"GHSA-jvj3-gqjm-cg8p","title":"A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK...","description":"A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.","status":"published","published":"2023-11-28T12:31:25Z","modified":"2026-10-15T00:30:44Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-203","CWE-208"],"updated_at":"2026-11-02T15:13:29.914076Z"}],"nvd":[{"id":"CVE-2023-5981","description":"A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.","status":"published","published":"2023-11-28T12:15:07.04Z","modified":"2026-11-05T12:17:34.987Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-208","CWE-203"],"updated_at":"2026-11-05T16:36:40.983114Z"}],"osv":[{"id":"ALPINE-CVE-2023-5981","description":"A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.","status":"published","published":"2023-11-28T12:15:07.04Z","modified":"2026-10-26T17:17:58.668279101Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"AZL-32048","title":"CVE-2023-5981 affecting package gnutls for versions less than 3.7.11-1","description":"A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.","status":"published","published":"2023-11-28T12:15:07Z","modified":"2026-04-21T04:26:37.481809Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"BELL-CVE-2023-5981","status":"published","published":"2023-11-18T05:59:28.188993Z","modified":"2026-01-26T09:34:39.811213Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:19.288949Z"},{"id":"CVE-2023-5981","title":"Gnutls: timing side-channel in the rsa-psk authentication","description":"A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.","status":"published","published":"2023-11-28T11:49:50.138Z","modified":"2026-11-07T02:30:51.879434069Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-208"],"updated_at":"2026-11-07T03:07:52.010191Z"},{"id":"DEBIAN-CVE-2023-5981","description":"A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.","status":"published","published":"2023-11-28T12:15:07.04Z","modified":"2026-10-26T18:03:10.354001909Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:41.533064Z"},{"id":"JLSEC-2026-524","description":"A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.","status":"published","published":"2026-05-26T14:17:50.003Z","modified":"2026-07-18T00:01:00.843527675Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2023-1867","title":"gnutls security update","description":"GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, and other required structures. The project strives to provide a secure communications back-end, simple to use and integrated with the rest of the base Linux libraries. A back-end designed to work and be secure out of the box, keeping the complexity of TLS and PKI out of application code.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.(CVE-2023-5981)","status":"published","published":"2023-12-01T11:06:18Z","modified":"2026-08-18T01:18:05.277072583Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHSA-2024:0155","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2024-09-16T12:46:26Z","modified":"2026-10-15T10:06:31Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0319","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2024-09-16T12:47:03Z","modified":"2026-10-15T10:06:36Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0399","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2024-09-16T12:46:00Z","modified":"2026-10-15T10:06:37Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0451","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2024-09-16T12:46:28Z","modified":"2026-10-15T10:06:45Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0533","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2024-09-16T12:46:50Z","modified":"2026-10-15T10:06:48Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"UBUNTU-CVE-2023-5981","description":"A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.","status":"published","published":"2023-11-17T00:00:00Z","modified":"2026-07-14T23:30:12.979904269Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:41.555387Z"},{"id":"ALSA-2024:0155","title":"Moderate: gnutls security update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.\n\nSecurity Fix(es):\n\n* gnutls: timing side-channel in the RSA-PSK authentication (CVE-2023-5981)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-01-10T00:00:00Z","modified":"2026-10-29T11:02:27.387195375Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2024:0533","title":"Moderate: gnutls security update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.\n\nSecurity Fix(es):\n\n* gnutls: timing side-channel in the RSA-PSK authentication (CVE-2023-5981)\n* gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553)\n* gnutls: rejects certificate chain with distributed trust (CVE-2024-0567)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-01-29T00:00:00Z","modified":"2026-10-29T11:31:41.1385709Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2024:0627","title":"Moderate: gnutls security update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.\n\nSecurity Fix(es):\n\n* gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-01-31T00:00:00Z","modified":"2026-10-29T11:02:27.372791673Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2024-1707419801","title":"Fix CVE(s): CVE-2023-5981","description":"   * SECURITY UPDATE: timing side-channel in the RSA-PSK ClientKeyExchange\n     - debian/patches/nettle-pk-randomness-level.patch: (nettle/pk) use the\n       appropriate level of randomness for each operation.\n     - debian/patches/pk-_gnutls_switch_lib_state.patch: (pk) always use\n       _gnutls_switch_lib_state.\n     - debian/patches/constant-time-cache-pkcs-1-rsa-decryption.patch: Constant\n       time/cache PKCS#1 RSA decryption.\n     - debian/patches/auth-rsa_psk-side-channel.patch: (auth/rsa_psk) side-step\n       potential side-channel.\n     - debian/libgnutls30.symbols: add gnutls_privkey_decrypt_data2.\n     - CVE-2023-5981","status":"published","published":"2024-02-08T19:16:44Z","modified":"2026-06-04T10:03:15.97854Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1708029216","title":"gnutls: Fix of 3 CVEs","description":"- Add CVE-2024-0567 PoC test\n- Remove src.rpm from sources\n- CVE-2023-5981: removes branching that depends on secret data to\n  prevent potential side-channel attack\n- CVE-2024-0553: minimize branching after decryption","status":"published","published":"2024-02-15T20:33:39Z","modified":"2026-10-21T10:46:36.303930659Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1708029490","title":"gnutls: Fix of 3 CVEs","description":"- Add CVE-2024-0567 PoC test\n- Remove src.rpm from sources\n- CVE-2023-5981: removes branching that depends on secret data to\n  prevent potential side-channel attack\n- CVE-2024-0553: minimize branching after decryption","status":"published","published":"2024-02-15T20:38:13Z","modified":"2026-10-21T10:45:10.991574209Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1708029809","title":"gnutls: Fix of 2 CVEs","description":"- CVE-2023-5981, CVE-2024-0553: fix timing sidechannel in RSA-PSK key exchange","status":"published","published":"2024-02-15T20:43:32Z","modified":"2026-06-01T00:30:09.233262468Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1710184399","title":"gnutls: Fix of 3 CVEs","description":"- Keep the broken pkcs11 tests disabled.\n- Added CVE-2024-0567 PoC test.\n- CVE-2023-5981-pre1: improve level of randomness for each operations,\n  always use _gnutls_switch_lib_state for pk wrappers.\n- CVE-2023-5981-pre2: add constant time/cache operations to prevent\n  or minimaze timining or cache side channel attacks.\n- CVE-2023-5981: removes branching that depends on secret data to\n  prevent potential side-channel attack.\n- CVE-2024-0553: minimize branching after decryption.","status":"published","published":"2024-03-11T19:13:22Z","modified":"2026-10-21T10:47:53.213326094Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1734368297","title":"gnutls: Fix of 3 CVEs","description":"- Keep the broken pkcs11 tests disabled.\n- Added CVE-2024-0567 PoC test.\n- CVE-2023-5981-pre1: improve level of randomness for each operations,\n  always use _gnutls_switch_lib_state for pk wrappers.\n- CVE-2023-5981-pre2: add constant time/cache operations to prevent\n  or minimaze timining or cache side channel attacks.\n- CVE-2023-5981: removes branching that depends on secret data to\n  prevent potential side-channel attack.\n- CVE-2024-0553: minimize branching after decryption.","status":"published","published":"2024-12-16T16:58:23Z","modified":"2026-10-21T10:48:18.469917227Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2025-1749479602","title":"gnutls: Fix of 3 CVEs","description":"- Keep the broken pkcs11 tests disabled.\n- Added CVE-2024-0567 PoC test.\n- CVE-2023-5981-pre1: improve level of randomness for each operations,\n  always use _gnutls_switch_lib_state for pk wrappers.\n- CVE-2023-5981-pre2: add constant time/cache operations to prevent\n  or minimaze timining or cache side channel attacks.\n- CVE-2023-5981: removes branching that depends on secret data to\n  prevent potential side-channel attack.\n- CVE-2024-0553: minimize branching after decryption.","status":"published","published":"2025-06-09T14:33:27Z","modified":"2026-10-21T10:48:13.745762143Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2026-1791621767","title":"Fix CVE(s): CVE-2023-5981, CVE-2024-0553","description":"   * SECURITY UPDATE: timing side-channel in RSA-PSK ClientKeyExchange\n     - debian/patches/CVE-2023-5981-pre1.patch: use the appropriate level of\n       randomness for each nettle operation and fail through the library\n       state instead of abort(), in lib/nettle/pk.c, lib/fips.h,\n       lib/includes/gnutls/crypto.h.\n     - debian/patches/CVE-2023-5981-pre2.patch: add the side-channel silent\n       gnutls_privkey_decrypt_data2() on top of nettle rsa_sec_decrypt(), in\n       lib/gnutls_privkey.c, lib/nettle/pk.c, lib/pkcs11_privkey.c,\n       configure.ac and related headers, with selftest and test.\n     - debian/patches/CVE-2023-5981.patch: use the new function in the\n       RSA-PSK server without branching on the decryption result, in\n       lib/auth/rsa_psk.c.\n     - debian/libgnutls30.symbols: add gnutls_privkey_decrypt_data2.\n     - debian/control: build-depend on nettle-dev with rsa_sec_decrypt.\n     - CVE-2023-5981\n   * SECURITY UPDATE: incomplete fix for CVE-2023-5981\n     - debian/patches/CVE-2024-0553.patch: move the PSK lookup and key\n       setup before the decryption, in lib/auth/rsa_psk.c.\n     - debian/patches/CVE-2026-5260-decrypt_data2.patch: reject a\n       ciphertext that does not match the modulus size and size the PKCS#11\n       buffer for the plaintext, in lib/auth/rsa_psk.c and\n       lib/pkcs11_privkey.c.\n     - CVE-2024-0553","status":"published","published":"2026-10-10T08:42:59Z","modified":"2026-10-26T09:32:02.230486655Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"DLA-3660-1","title":"gnutls28 - security update","status":"published","published":"2023-11-22T00:00:00Z","modified":"2026-03-09T02:10:14.55656Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2024-0008","title":"Updated gnutls packages fix a security vulnerability","description":"The updated packages fix a security vulnerability:\nA vulnerability was found that the response times to malformed\nciphertexts in RSA-PSK ClientKeyExchange differ from response times of\nciphertexts with correct PKCS#1 v1.5 padding. (CVE-2023-5981)\n","status":"published","published":"2024-01-14T22:23:43Z","modified":"2026-04-16T04:41:51.669958327Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13444-1","title":"gnutls-3.8.2-1.1 on GA media","description":"These are all security issues fixed in the gnutls-3.8.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:42:46.738969Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"RLSA-2024:0155","title":"Moderate: gnutls security update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.\n\nSecurity Fix(es):\n\n* gnutls: timing side-channel in the RSA-PSK authentication (CVE-2023-5981)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-01-12T19:56:54.867356Z","modified":"2026-02-05T02:15:11.729047Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2023:4952-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\n- CVE-2023-0361: Fixed a Bleichenbacher oracle in the TLS RSA key exchange (bsc#1208143).\n- CVE-2023-5981: Fixed timing side-channel inside RSA-PSK key exchange (bsc#1217277).\n","status":"published","published":"2023-12-21T14:08:37Z","modified":"2025-05-02T04:34:08.349442Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4983-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\n- CVE-2023-5981: Fixed timing side-channel inside RSA-PSK key exchange (bsc#1217277).\n","status":"published","published":"2023-12-28T13:22:03Z","modified":"2026-02-04T03:31:04.395981Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4986-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\n- CVE-2023-5981: Fixed timing side-channel inside RSA-PSK key exchange (bsc#1217277).\n","status":"published","published":"2023-12-28T15:06:09Z","modified":"2026-02-04T04:07:17.557929Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2024:0860-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\n- CVE-2024-0553: Fixed insufficient mitigation for side channel attack in RSA-PSK, aka CVE-2023-5981 (bsc#1218865).\n","status":"published","published":"2024-03-13T07:45:37Z","modified":"2026-02-04T04:33:29.099989Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:1179-1","title":"Security update for gnutls","description":"\nThis update for gnutls fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2023-0361: Fixed a Bleichenbacher oracle in the TLS RSA key exchange (bsc#1208143).\n- CVE-2023-5981: Fixed timing side-channel inside RSA-PSK key exchange (bsc#1217277).\n- CVE-2024-0567: Fixed an incorrect rejection of certificate chains\n  with distributed trust (bsc#1218862).\n- CVE-2024-0553: Fixed a timing attack against the RSA-PSK key\n  exchange, which could lead to the leakage of sensitive data\n  (bsc#1218865).\n\nFIPS 140-3 certification related bugs fixed:\n\n- FIPS: Set error state when jent init failed in FIPS mode (bsc#1202146)\n- FIPS: Make XTS key check failure not fatal (bsc#1203779)\n- FIPS: Added GnuTLS DH/ECDH pairwise consistency check for public key regeneration [bsc#1207183]\n- FIPS: Change all the 140-2 references to FIPS 140-3 in order to account for the new FIPS certification [bsc#1207346]\n- FIPS: Make the jitterentropy calls thread-safe (bsc#1208146).\n- FIPS: GnuTLS DH/ECDH PCT public key regeneration (bsc#1207183).\n- FIPS: Fix pct_test() return code in case of error (bsc#1207183)\n- FIPS: Establish PBKDF2 additional requirements [bsc#1209001]\n\n  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)\n  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)\n  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)\n  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)\n  * Add regression tests for the new PBKDF2 requirements.\n\nOther issues fixed:\n\n- Fix AVX CPU feature detection for OSXSAVE (bsc#1203299)\n  This fixes a SIGILL termination at the verzoupper instruction when\n  trying to run GnuTLS on a Linux kernel with the noxsave command\n  line parameter set. Relevant mostly for virtual systems.\n- Increase the limit of TLS PSK usernames from 128 to 65535 characters. [bsc#1208237, jsc#PED-1562]\n","status":"published","published":"2024-04-09T16:08:45Z","modified":"2025-05-02T04:34:08.411292Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"USN-6499-1","title":"gnutls28 vulnerability","description":"It was discovered that GnuTLS had a timing side-channel when handling\ncertain RSA-PSK key exchanges. A remote attacker could possibly use this\nissue to recover sensitive information.\n","status":"published","published":"2023-11-21T15:29:41Z","modified":"2026-04-22T10:41:38.133211Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6499-2","title":"gnutls28 vulnerability","description":"USN-6499-1 fixed vulnerabilities in GnuTLS. This update provides the\ncorresponding update for Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that GnuTLS had a timing side-channel when handling\n certain RSA-PSK key exchanges. A remote attacker could possibly use this\n issue to recover sensitive information.\n","status":"published","published":"2024-01-08T11:39:13Z","modified":"2026-04-22T10:41:30.975863Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}