* SECURITY UPDATE: timing side-channel in RSA-PSK ClientKeyExchange - debian/patches/CVE-2023-5981-pre1.patch: use the appropriate level of randomness for each nettle operation and fail through the library state instead of abort(), in lib/nettle/pk.c, lib/fips.h, lib/includes/gnutls/crypto.h. - debian/patches/CVE-2023-5981-pre2.patch: add the side-channel silent gnutls_privkey_decrypt_data2() on top of nettle rsa_sec_decrypt(), in lib/gnutls_privkey.c, lib/nettle/pk.c, lib/pkcs11_privkey.c, configure.ac and related headers, with selftest and test. - debian/patches/CVE-2023-5981.patch: use the new function in the RSA-PSK server without branching on the decryption result, in lib/auth/rsa_psk.c. - debian/libgnutls30.symbols: add gnutls_privkey_decrypt_data2. - debian/control: build-depend on nettle-dev with rsa_sec_decrypt. - CVE-2023-5981 * SECURITY UPDATE: incomplete fix for CVE-2023-5981 - debian/patches/CVE-2024-0553.patch: move the PSK lookup and key setup before the decryption, in lib/auth/rsa_psk.c. - debian/patches/CVE-2026-5260-decrypt_data2.patch: reject a ciphertext that does not match the modulus size and size the PKCS#11 buffer for the plaintext, in lib/auth/rsa_psk.c and lib/pkcs11_privkey.c. - CVE-2024-0553