- Committer: Bazaar Package Importer
- Date: 2009-02-20 13:47:47 UTC
- Revision ID: james.westby@ubuntu.com-20090220134747-qesq7zj42uh27rno
* Fix for certificate chain regressions introduced by fixes for
CVE-2008-4989
* debian/patches/20_CVE-2008-4989.diff: updated to upstream's final
2.4.2 - 2.4.3 patchset for lib/x509/verify.c to fix CVE-2008-4989 and
address all known regressions. To summarize from upstream:
- Fix X.509 certificate chain validation error (CVE-2008-4989)
- Fix chain verification for chains that end with RSA-MD2 CAs (LP: #305264)
- Deprecate X.509 validation chains using MD5 and MD2 signatures
- Accept chains where intermediary certs are trusted (LP: #305264)
CVE-2008-4989
* debian/patches/20_CVE-2008-4989.diff: updated to upstream's final
2.4.2 - 2.4.3 patchset for lib/x509/verify.c to fix CVE-2008-4989 and
address all known regressions. To summarize from upstream:
- Fix X.509 certificate chain validation error (CVE-2008-4989)
- Fix chain verification for chains that end with RSA-MD2 CAs (LP: #305264)
- Deprecate X.509 validation chains using MD5 and MD2 signatures
- Accept chains where intermediary certs are trusted (LP: #305264)
| Filename | Latest Rev | Last Changed | Committer | Comment | Size | ||
|---|---|---|---|---|---|---|---|
 .. |
|||||||
debian
|
2 | 18 years ago | Bazaar Package Importer | * Install /usr/lib/pkgconfig/*.pc files. * Depend |
|
||
|
doc
|
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 |
|
||
|
gl
|
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 |
|
||
|
includes
|
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 |
|
||
|
lib
|
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 |
|
||
|
libextra
|
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 |
|
||
|
m4
|
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 |
|
||
|
nettle
|
2 | 18 years ago | Bazaar Package Importer | * Install /usr/lib/pkgconfig/*.pc files. * Depend |
|
||
|
src
|
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 |
|
||
|
tests
|
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 |
|
||
aclocal.m4 |
2 | 18 years ago | Bazaar Package Importer | * Install /usr/lib/pkgconfig/*.pc files. * Depend | 49.9 KB |
|
|
|
AUTHORS |
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 | 10.8 KB |
|
|
|
ChangeLog |
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 | 1.2 MB |
|
|
config.guess |
6 | 15 years ago | Bazaar Package Importer | * SECURITY UPDATE: Fix for man-in-the-middle attac | 42.4 KB |
|
|
|
config.h.in |
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 | 11.3 KB |
|
|
|
config.rpath |
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 | 14.5 KB |
|
|
|
config.sub |
6 | 15 years ago | Bazaar Package Importer | * SECURITY UPDATE: Fix for man-in-the-middle attac | 30.9 KB |
|
|
|
configure |
2 | 18 years ago | Bazaar Package Importer | * Install /usr/lib/pkgconfig/*.pc files. * Depend | 721 KB |
|
|
|
configure.in |
2 | 18 years ago | Bazaar Package Importer | * Install /usr/lib/pkgconfig/*.pc files. * Depend | 14.8 KB |
|
|
|
COPYING |
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 | 17.5 KB |
|
|
|
COPYING.LIB |
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 | 25.8 KB |
|
|
|
depcomp |
2 | 18 years ago | Bazaar Package Importer | * Install /usr/lib/pkgconfig/*.pc files. * Depend | 15.4 KB |
|
|
|
gtk-doc.make |
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 | 4.4 KB |
|
|
|
INSTALL |
2 | 18 years ago | Bazaar Package Importer | * Install /usr/lib/pkgconfig/*.pc files. * Depend | 9.2 KB |
|
|
|
install-sh |
2 | 18 years ago | Bazaar Package Importer | * Install /usr/lib/pkgconfig/*.pc files. * Depend | 9 KB |
|
|
|
ltmain.sh |
2 | 18 years ago | Bazaar Package Importer | * Install /usr/lib/pkgconfig/*.pc files. * Depend | 187 KB |
|
|
|
Makefile.am |
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 | 2 KB |
|
|
|
Makefile.in |
2 | 18 years ago | Bazaar Package Importer | * Install /usr/lib/pkgconfig/*.pc files. * Depend | 25.1 KB |
|
|
|
missing |
2 | 18 years ago | Bazaar Package Importer | * Install /usr/lib/pkgconfig/*.pc files. * Depend | 10.6 KB |
|
|
|
NEWS |
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 | 45 KB |
|
|
|
README |
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 | 3.4 KB |
|
|
|
THANKS |
1 | 18 years ago | Bazaar Package Importer | Import upstream version 1.2.9 | 2.7 KB |
|
|