On 2019-04-04 Andreas Metzler <[email protected]> wrote: [...] > This is a upstream bugfix release featuring two security fixes
> + Fixes a memory corruption (double free) vulnerability in the > certificate verification API. > https://gitlab.com/gnutls/gnutls/issues/694 CVE-2019-3829 > GNUTLS-SA-2019-03-27 > + Fixes an invalid pointer access via malformed TLS1.3 async messages; > https://gitlab.com/gnutls/gnutls/issues/704 CVE-2019-3836 > GNUTLS-SA-2019-03-27 [...] Ping?

