type: security
subject: Updated gnutls packages fix security vulnerability
CVE:
 - CVE-2019-3829
src:
  6:
   core:
     - gnutls-3.5.13-1.3.mga6
description: |
  A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A
  memory corruption (double free) vulnerability in the certificate
  verification API. Any client or server application that verifies X.509
  certificates with GnuTLS 3.5.8 or later is affected. (CVE-2019-3829)
references:
 - https://bugs.mageia.org/show_bug.cgi?id=24590
 - https://www.gnutls.org/security-new.html
 - https://gitlab.com/gnutls/gnutls/issues/694
 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/WRSOL66LHP4SD3Y2ECJDOGT4K663ECDU/
ID: MGASA-2019-0134