Alpine/gnutls: high 7.5
It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.
Action: Upgrade gnutls to 3.6.7-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.6.3 | 3.6.7-r0 | - |
Fixed versions
| 3.6.7-r0 |
Sources
published · modified · JSON