tocsin

Alpine/gnutls: high 7.5

An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with unexpected timing, and then an invalid sec

Action: Upgrade gnutls to 3.6.15-r0 or later.

Affected

introducedfixedlast affected
03.6.15-r0-

Fixed versions

3.6.15-r0

Sources

published · modified · JSON