[gnutls-devel] gnutls 3.5.8

Nikos Mavrogiannopoulos nmav at gnutls.org
Mon Jan 9 09:25:10 CET 2017


On Mon, Jan 9, 2017 at 9:17 AM, Nikos Mavrogiannopoulos <nmav at gnutls.org> wrote:

> ** libgnutls: Fix double free in certificate information printing. If the PKIX
>    extension proxy was set with a policy language set but no policy specified,
>    that could lead to a double free. (issue found using oss-fuzz project)
>
> ** libgnutls: Addressed invalid memory accesses in OpenPGP certificate parsing.
>    (issues found using oss-fuzz project)

Note that I forgot to refer to GNUTLS-SA-2017-1 and GNUTLS-SA-2017-2 for these
two issues.

regards,
Nikos



More information about the Gnutls-devel mailing list