An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) and Extended Key Usage (EKU)
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-107448.json"