git: de7ce2041b78 - main - security/vuxml: Document GNUTLS-SA-2020-07-14
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 13 Feb 2023 14:14:20 UTC
The branch main has been updated by tijl:
URL: https://cgit.FreeBSD.org/ports/commit/?id=de7ce2041b787454f4a4331cea40ee467a0c4515
commit de7ce2041b787454f4a4331cea40ee467a0c4515
Author: Tijl Coosemans <tijl@FreeBSD.org>
AuthorDate: 2023-02-13 14:02:51 +0000
Commit: Tijl Coosemans <tijl@FreeBSD.org>
CommitDate: 2023-02-13 14:13:53 +0000
security/vuxml: Document GNUTLS-SA-2020-07-14
Security: https://gnutls.org/security-new.html#GNUTLS-SA-2020-07-14
---
security/vuxml/vuln/2023.xml | 29 +++++++++++++++++++++++++++++
1 file changed, 29 insertions(+)
diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml
index ffe64f6fb47b..a3feb1c2e6d7 100644
--- a/security/vuxml/vuln/2023.xml
+++ b/security/vuxml/vuln/2023.xml
@@ -1,3 +1,32 @@
+ <vuln vid="0a7a5dfb-aba4-11ed-be2c-001cc0382b2f">
+ <topic>GnuTLS -- timing sidechannel in RSA decryption</topic>
+ <affects>
+ <package>
+ <name>gnutls</name>
+ <range><lt>3.7.9</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>The GnuTLS project reports:</p>
+ <blockquote cite="https://gnutls.org/security-new.html#GNUTLS-SA-2020-07-14">
+ <p>A vulnerability was found that the response times to malformed RSA
+ ciphertexts in ClientKeyExchange differ from response times of
+ ciphertexts with correct PKCS#1 v1.5 padding. Only TLS ciphertext
+ processing is affected.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2023-0361</cvename>
+ <url>https://gnutls.org/security-new.html#GNUTLS-SA-2020-07-14</url>
+ </references>
+ <dates>
+ <discovery>2023-02-10</discovery>
+ <entry>2023-02-13</entry>
+ </dates>
+ </vuln>
+
<vuln vid="3eccc968-ab17-11ed-bd9e-589cfc0f81b0">
<topic>phpmyfaq -- multiple vulnerabilities</topic>
<affects>