From: Alexander Sosedkin Date: Wed, 29 Apr 2026 12:04:28 +0000 (+0200) Subject: NEWS: add an entry for #1819 X-Git-Tag: 3.8.13^2~10 X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=4e1313f89618230d3041f31ffea95cebc21b030d;p=thirdparty%2Fgnutls.git NEWS: add an entry for #1819 Signed-off-by: Alexander Sosedkin --- diff --git a/NEWS b/NEWS index a5cd297f8a..f76b7bd73c 100644 --- a/NEWS +++ b/NEWS @@ -142,6 +142,12 @@ See the end for copying conditions. Independently reported by Kamil Frankowicz and Joshua Rogers of AISLE Research Team. +** libgnutls: Fix a theoretical double-free during certificate import + If gnutls_x509_crt_list_import_pkcs11 failed partway through, + the trust list cleanup code would try to free already-deinitialized + certificate entries, leading to a double-free (#1819). + Reported by Joshua Rogers of AISLE Research Team. + ** build: Support building with Nettle 4.0 Nettle 4.0 was released in Feburary 2026, with API incompatibile changes from 3.10. The library can now compile with it, while