Mageia 6 MGASA-2019-0134 Critical: GnuTLS Double Free Vulnerability Alert
mageia
April 5, 2019
A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7
Summary
A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A
memory corruption (double free) vulnerability in the certificate
verification API. Any client or server application that verifies X.509
certificates with GnuTLS 3.5.8 or later is affected. (CVE-2019-3829)
References
- https://bugs.mageia.org/show_bug.cgi?id=24590
- https://www.gnutls.org/security-new.html
- https://gitlab.com/gnutls/gnutls/-/issues/694
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/WRSOL66LHP4SD3Y2ECJDOGT4K663ECDU/
- https://www.cve.org/CVERecord?id=CVE-2019-3829
Topics Covered
Resolution
SRPMS
- 6/core/gnutls-3.5.13-1.3.mga6
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Publication date: 05 Apr 2019
URL: https://advisories.mageia.org/MGASA-2019-0134.html
Type: security
CVE: CVE-2019-3829
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!