Vivek Kumbhar 3acc83f91a gnutls: fix CVE-2023-0361 timing side-channel in the TLS RSA key exchange code ...

Remove branching that depends on secret data.

since the `ok` variable isn't used any more, we can remove all code
used to calculate it

(From OE-Core rev: 5b8a3601ebff7a0cdfaa50d7a0b5e384a7e2514c)

Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2023-03-15 23:09:23 +00:00

..

gnutls

gnutls: fix CVE-2023-0361 timing side-channel in the TLS RSA key exchange code

2023-03-15 23:09:23 +00:00

libtasn1

libtasn1: fix CVE-2021-46848 off-by-one in asn1_encode_simple_der

2022-12-07 15:06:36 +00:00

gnutls_3.6.14.bb

gnutls: fix CVE-2023-0361 timing side-channel in the TLS RSA key exchange code

2023-03-15 23:09:23 +00:00

libtasn1_4.16.0.bb

libtasn1: fix CVE-2021-46848 off-by-one in asn1_encode_simple_der

2022-12-07 15:06:36 +00:00