GnuTLS patches huge security hole that hung around for two years – worse than Heartbleed, says Google cryptoboffin
The GnuTLS open source library fixed a bug hiding in the code for two years, making resumed TLS 1.3 sessions vulnerable.
https://www.theregister.com/2020/06/10/gnutls_patches_security_hole/