-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5349-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
February 14, 2023                     https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : gnutls28
CVE ID         : CVE-2023-0361

Hubert Kario discovered a timing side channel in the RSA decryption
implementation of the GNU TLS library.
 
For the stable distribution (bullseye), this problem has been fixed in
version 3.7.1-5+deb11u3.

We recommend that you upgrade your gnutls28 packages.

For the detailed security status of gnutls28 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/gnutls28

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=qFL8
-----END PGP SIGNATURE-----