gnutls-3: fix recent CVEs