Search for packages
Package details: pkg:alpm/archlinux/gnutls@3.6.6-3
purl pkg:alpm/archlinux/gnutls@3.6.6-3
Next non-vulnerable version 3.6.7-1
Latest non-vulnerable version 3.7.1-1
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-2q8u-2qmc-aaam
Aliases:
CVE-2019-3829
A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates with GnuTLS 3.5.8 or later is affected.
3.6.7-1
Affected by 0 other vulnerabilities.
VCID-8y1d-9hfb-aaak
Aliases:
CVE-2019-3836
It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.
3.6.7-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:44:27.500828+00:00 Arch Linux Importer Affected by VCID-2q8u-2qmc-aaam https://security.archlinux.org/AVG-945 36.0.0
2025-03-28T07:44:27.478912+00:00 Arch Linux Importer Affected by VCID-8y1d-9hfb-aaak https://security.archlinux.org/AVG-945 36.0.0
2024-09-18T01:59:32.324524+00:00 Arch Linux Importer Affected by VCID-2q8u-2qmc-aaam https://security.archlinux.org/AVG-945 34.0.1
2024-09-18T01:59:32.296419+00:00 Arch Linux Importer Affected by VCID-8y1d-9hfb-aaak https://security.archlinux.org/AVG-945 34.0.1
2024-01-16T16:00:35.315280+00:00 Arch Linux Importer Affected by VCID-2q8u-2qmc-aaam https://security.archlinux.org/AVG-945 34.0.0rc2
2024-01-16T16:00:35.291727+00:00 Arch Linux Importer Affected by VCID-8y1d-9hfb-aaak https://security.archlinux.org/AVG-945 34.0.0rc2
2024-01-03T22:25:48.728606+00:00 Arch Linux Importer Affected by VCID-2q8u-2qmc-aaam https://security.archlinux.org/AVG-945 34.0.0rc1
2024-01-03T22:25:48.701757+00:00 Arch Linux Importer Affected by VCID-8y1d-9hfb-aaak https://security.archlinux.org/AVG-945 34.0.0rc1