{"id":"CLSA-2026-1791621767","summary":"Fix CVE(s): CVE-2023-5981, CVE-2024-0553","details":"   * SECURITY UPDATE: timing side-channel in RSA-PSK ClientKeyExchange\n     - debian/patches/CVE-2023-5981-pre1.patch: use the appropriate level of\n       randomness for each nettle operation and fail through the library\n       state instead of abort(), in lib/nettle/pk.c, lib/fips.h,\n       lib/includes/gnutls/crypto.h.\n     - debian/patches/CVE-2023-5981-pre2.patch: add the side-channel silent\n       gnutls_privkey_decrypt_data2() on top of nettle rsa_sec_decrypt(), in\n       lib/gnutls_privkey.c, lib/nettle/pk.c, lib/pkcs11_privkey.c,\n       configure.ac and related headers, with selftest and test.\n     - debian/patches/CVE-2023-5981.patch: use the new function in the\n       RSA-PSK server without branching on the decryption result, in\n       lib/auth/rsa_psk.c.\n     - debian/libgnutls30.symbols: add gnutls_privkey_decrypt_data2.\n     - debian/control: build-depend on nettle-dev with rsa_sec_decrypt.\n     - CVE-2023-5981\n   * SECURITY UPDATE: incomplete fix for CVE-2023-5981\n     - debian/patches/CVE-2024-0553.patch: move the PSK lookup and key\n       setup before the decryption, in lib/auth/rsa_psk.c.\n     - debian/patches/CVE-2026-5260-decrypt_data2.patch: reject a\n       ciphertext that does not match the modulus size and size the PKCS#11\n       buffer for the plaintext, in lib/auth/rsa_psk.c and\n       lib/pkcs11_privkey.c.\n     - CVE-2024-0553","modified":"2026-10-26T09:32:02.230486655Z","published":"2026-10-10T08:42:59Z","upstream":["CVE-2023-5981","CVE-2024-0553","CVE-2026-5260"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1791621767.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5981"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0553"}],"affected":[{"package":{"name":"gnutls-bin","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/gnutls-bin?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.9+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791621767.json"}},{"package":{"name":"gnutls-doc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/gnutls-doc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.9+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791621767.json"}},{"package":{"name":"guile-gnutls","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/guile-gnutls?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.9+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791621767.json"}},{"package":{"name":"libgnutls-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libgnutls-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.9+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791621767.json"}},{"package":{"name":"libgnutls-openssl27","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libgnutls-openssl27?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.9+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791621767.json"}},{"package":{"name":"libgnutls28-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libgnutls28-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.9+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791621767.json"}},{"package":{"name":"libgnutls30","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libgnutls30?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.9+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791621767.json"}},{"package":{"name":"libgnutlsxx28","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libgnutlsxx28?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.9+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791621767.json"}}],"schema_version":"1.9.0"}