Search for packages
Package details: pkg:alpm/archlinux/gnutls@3.6.7-1
purl pkg:alpm/archlinux/gnutls@3.6.7-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-a465-1u5b-mugp It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages. CVE-2019-3836
VCID-fzps-jr7y-wfbu A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates with GnuTLS 3.5.8 or later is affected. CVE-2019-3829

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-31T11:35:16.456005+00:00 Arch Linux Importer Fixing VCID-fzps-jr7y-wfbu https://security.archlinux.org/AVG-945 37.0.0
2025-07-31T11:35:16.427517+00:00 Arch Linux Importer Fixing VCID-a465-1u5b-mugp https://security.archlinux.org/AVG-945 37.0.0