The PKCS#7 padding check performed during decryption was not constant-time, potentially leaking information about the padding bytes through timing differences. The issue was reported in the issue tracker as #1815 by Doria Tang of Stony Brook University.
Recommendation: To address the issue found, upgrade to GnuTLS 3.8.13 or later versions.