FEDORA-2019-e8c1cf958f — security update for gnutls

stable

gnutls-3.6.7-1.fc29

FEDORA-2019-e8c1cf958f created by ansasaki 6 years ago for Fedora 29

Update to upstream release 3.6.7

Security fix for CVE-2019-3836 and CVE-2019-3829

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2019-e8c1cf958f

This update has been submitted for testing by ansasaki.

6 years ago

This update has been pushed to testing.

6 years ago

besser82 commented & provided feedback 6 years ago

karma

Works great! LGTM! =)

renault commented & provided feedback 6 years ago

karma

No regressions found

flexo3001 commented & provided feedback 6 years ago

karma

works for me

This update has been submitted for batched by bodhi.

6 years ago

This update has been submitted for stable by bodhi.

6 years ago

This update has been pushed to stable.

6 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

Builds

gnutls-3.6.7-1.fc29

BZ#1677048 CVE-2019-3829 gnutls: use-after-free/double-free in certificate verification

BZ#1678411 CVE-2019-3836 gnutls: invalid pointer access upon receiving async handshake messages

BZ#1685434 p11tool is using a RO session when logging as SO

BZ#1693094 gnutls-3.6.7 is available

BZ#1693210 CVE-2019-3829 gnutls: use-after-free/double-free in certificate verification [fedora-all]

BZ#1693214 CVE-2019-3836 gnutls: invalid pointer access upon receiving async handshake messages [fedora-all]

gnutls-3.6.7-1.fc29

Automated Test Results

ignored