Bug#1061046: gnutls28: CVE-2024-0553

[Salvatore Bonaccorso]

Source: gnutls28
Version: 3.8.2-1
Severity: important
Tags: security upstream
Forwarded: https://gitlab.com/gnutls/gnutls/-/issues/1522
X-Debbugs-Cc: carnil at debian.org, Debian Security Team <team at security.debian.org>
Control: found -1 3.7.9-2+deb12u1
Control: found -1 3.7.1-5+deb11u4

Hi,

The following vulnerability was published for gnutls28.

CVE-2024-0553[0]:
| A vulnerability was found in GnuTLS. The response times to malformed
| ciphertexts in RSA-PSK ClientKeyExchange differ from response times
| of ciphertexts with correct PKCS#1 v1.5 padding. This issue may
| allow a remote attacker to perform a timing side-channel attack in
| the RSA-PSK key exchange, potentially leading to the leakage of
| sensitive data. CVE-2024-0553 is designated as an incomplete
| resolution for CVE-2023-5981.

Note, that the CVE exists because of an incomplete fix for
CVE-2023-5981. So strictly speaking the bullseye version is not yet
released in stable, and so if we do a complete fix with a followup,
then strictly speaking gnutls28 in bullseye won't be affected. OTOH
the gnutls28 version with the incomplete fix is already in
bullseye-proposed-updates, so guess it's safe to track it as it's done
now.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2024-0553
    https://www.cve.org/CVERecord?id=CVE-2024-0553
[1] https://gitlab.com/gnutls/gnutls/-/issues/1522
[2] https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html

Regards,
Salvatore