From a99f3e3489e72fce9974b1e77494577d6eb39ac7 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 8 Jan 2024 16:46:23 +0000
Subject: [PATCH] Publish GHSA-9763-4f94-gfch

---
 .../GHSA-9763-4f94-gfch.json                  | 62 +++++++++++++++++++
 1 file changed, 62 insertions(+)
 create mode 100644 advisories/github-reviewed/2024/01/GHSA-9763-4f94-gfch/GHSA-9763-4f94-gfch.json

diff --git a/advisories/github-reviewed/2024/01/GHSA-9763-4f94-gfch/GHSA-9763-4f94-gfch.json b/advisories/github-reviewed/2024/01/GHSA-9763-4f94-gfch/GHSA-9763-4f94-gfch.json
new file mode 100644
index 00000000000..d5d04a25de0
--- /dev/null
+++ b/advisories/github-reviewed/2024/01/GHSA-9763-4f94-gfch/GHSA-9763-4f94-gfch.json
@@ -0,0 +1,62 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9763-4f94-gfch",
+  "modified": "2024-01-08T16:45:05Z",
+  "published": "2024-01-08T16:45:05Z",
+  "aliases": [
+
+  ],
+  "summary": "CIRCL's Kyber: timing side-channel (kyberslash2)",
+  "details": "### Impact\nOn some platforms, when an attacker can time decapsulation of Kyber on forged cipher texts, they could possibly learn (parts of) the secret key.\n\nDoes not apply to ephemeral usage, such as when used in the regular way in TLS.\n\n### Patches\nPatched in 1.3.7.\n\n### References\n- [kyberslash.cr.yp.to](https://kyberslash.cr.yp.to/)",
+  "severity": [
+
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Go",
+        "name": "github.com/cloudflare/circl"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.3.7"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/cloudflare/circl/security/advisories/GHSA-9763-4f94-gfch"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/cloudflare/circl/commit/75ef91e8a2f438e6ce2b6e620d236add8be1887d"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/cloudflare/circl"
+    },
+    {
+      "type": "WEB",
+      "url": "https://kyberslash.cr.yp.to/"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "HIGH",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-01-08T16:45:05Z",
+    "nvd_published_at": null
+  }
+}
\ No newline at end of file