gnutls13 2.0.4-1ubuntu2.5 source package in Ubuntu
Changelog
gnutls13 (2.0.4-1ubuntu2.5) hardy-security; urgency=low
* Fix for certificate chain regressions introduced by fixes for
CVE-2008-4989
* debian/patches/91_CVE-2008-4989.diff: updated to upstream's final
2.4.2 - 2.4.3 patchset for lib/x509/verify.c to fix CVE-2008-4989 and
address all known regressions. To summarize from upstream:
- Fix X.509 certificate chain validation error (CVE-2008-4989)
- Fix chain verification for chains that end with RSA-MD2 CAs (LP: #305264)
- Deprecate X.509 validation chains using MD5 and MD2 signatures
- Accept chains where intermediary certs are trusted (LP: #305264)
-- Jamie Strandboge <email address hidden> Fri, 20 Feb 2009 13:02:36 -0600
Upload details
- Uploaded by:
- Jamie Strandboge
- Uploaded to:
- Hardy
- Original maintainer:
- Ubuntu Development Team
- Architectures:
- any
- Section:
- devel
- Urgency:
- Low Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| gnutls13_2.0.4.orig.tar.gz | 5.6 MiB | 2219182317e600c40775ae9a003f669cdcaee69cfcb679cbf64f10525b10f6ce |
| gnutls13_2.0.4-1ubuntu2.5.diff.gz | 26.0 KiB | 9c3bb495f75ed39b759cbfe3496b89d968391ccd7b92491809317446662a32a5 |
| gnutls13_2.0.4-1ubuntu2.5.dsc | 1.1 KiB | 271bcf745c53baa3f14a126242084d94edb54dc7131fffb2df57f3afe91a98aa |
Available diffs
Binary packages built by this source
- gnutls-bin: No summary available for gnutls-bin in ubuntu hardy.
No description available for gnutls-bin in ubuntu hardy.
- gnutls-doc: No summary available for gnutls-doc in ubuntu hardy.
No description available for gnutls-doc in ubuntu hardy.
- libgnutls-dev: No summary available for libgnutls-dev in ubuntu hardy.
No description available for libgnutls-dev in ubuntu hardy.
- libgnutls13: No summary available for libgnutls13 in ubuntu hardy.
No description available for libgnutls13 in ubuntu hardy.
- libgnutls13-dbg: No summary available for libgnutls13-dbg in ubuntu hardy.
No description available for libgnutls13-dbg in ubuntu hardy.
- libgnutlsxx13: No summary available for libgnutlsxx13 in ubuntu hardy.
No description available for libgnutlsxx13 in ubuntu hardy.
