CLSA-2026-1791621767
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791621767.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1791621767
- Upstream
- Published
- 2026-10-10T08:42:59Z
- Modified
- 2026-10-26T09:32:02Z
- Summary
- Fix CVE(s): CVE-2023-5981, CVE-2024-0553
- Details
-
- SECURITY UPDATE: timing side-channel in RSA-PSK ClientKeyExchange
- debian/patches/CVE-2023-5981-pre1.patch: use the appropriate level of randomness for each nettle operation and fail through the library state instead of abort(), in lib/nettle/pk.c, lib/fips.h, lib/includes/gnutls/crypto.h.
- debian/patches/CVE-2023-5981-pre2.patch: add the side-channel silent gnutls_privkey_decrypt_data2() on top of nettle rsa_sec_decrypt(), in lib/gnutls_privkey.c, lib/nettle/pk.c, lib/pkcs11_privkey.c, configure.ac and related headers, with selftest and test.
- debian/patches/CVE-2023-5981.patch: use the new function in the RSA-PSK server without branching on the decryption result, in lib/auth/rsa_psk.c.
- debian/libgnutls30.symbols: add gnutls_privkey_decrypt_data2.
- debian/control: build-depend on nettle-dev with rsa_sec_decrypt.
- CVE-2023-5981
- SECURITY UPDATE: incomplete fix for CVE-2023-5981
- debian/patches/CVE-2024-0553.patch: move the PSK lookup and key setup before the decryption, in lib/auth/rsa_psk.c.
- debian/patches/CVE-2026-5260-decrypt_data2.patch: reject a ciphertext that does not match the modulus size and size the PKCS#11 buffer for the plaintext, in lib/auth/rsa_psk.c and lib/pkcs11_privkey.c.
- CVE-2024-0553
- SECURITY UPDATE: timing side-channel in RSA-PSK ClientKeyExchange
- References