- Committer: Bazaar Package Importer
- Date: 2009-08-14 14:57:08 UTC
- mfrom: (16.1.2 hardy-proposed)
- Revision ID: james.westby@ubuntu.com-20090814145708-8kq1sgl8bqszp4g6
* SECURITY UPDATE: fix improper handling of '\0' in Common Name (CN) and
Subject Alternative Name (SAN) in X.509 certificates (LP: #413136)
- debian/patches/91_CVE-2009-2730.diff: verify length of CN and SAN
are what we expect and error out if either contains an embedded \0.
This fixed required updating _gnutls_hostname_compare() in
lib/x509/rfc2818_hostname.c to support wide wildcard hostname matching.
This is a backward compatible change and which only adds additional
matching of hostnames.
- CVE-2009-2730
Subject Alternative Name (SAN) in X.509 certificates (LP: #413136)
- debian/patches/91_CVE-2009-2730.diff: verify length of CN and SAN
are what we expect and error out if either contains an embedded \0.
This fixed required updating _gnutls_hostname_compare() in
lib/x509/rfc2818_hostname.c to support wide wildcard hostname matching.
This is a backward compatible change and which only adds additional
matching of hostnames.
- CVE-2009-2730
| Filename | Latest Rev | Last Changed | Committer | Comment | Size | ||
|---|---|---|---|---|---|---|---|
 .. |
|||||||
build-aux
|
1.1.4 | 16 years ago | Bazaar Package Importer | Import upstream version 2.0.1 |
|
||
|
debian
|
2 | 17 years ago | Bazaar Package Importer | [ Andreas Metzler ] * Strip "libgnutls-config --li |
|
||
|
doc
|
1 | 17 years ago | Bazaar Package Importer | Import upstream version 1.4.0 |
|
||
|
gl
|
1 | 17 years ago | Bazaar Package Importer | Import upstream version 1.4.0 |
|
||
|
guile
|
1.1.4 | 16 years ago | Bazaar Package Importer | Import upstream version 2.0.1 |
|
||
|
includes
|
1 | 17 years ago | Bazaar Package Importer | Import upstream version 1.4.0 |
|
||
|
lgl
|
1.1.2 | 17 years ago | Bazaar Package Importer | Import upstream version 1.6.2 |
|
||
|
lib
|
1 | 17 years ago | Bazaar Package Importer | Import upstream version 1.4.0 |
|
||
|
libextra
|
1 | 17 years ago | Bazaar Package Importer | Import upstream version 1.4.0 |
|
||
|
m4
|
1 | 17 years ago | Bazaar Package Importer | Import upstream version 1.4.0 |
|
||
|
po
|
1 | 17 years ago | Bazaar Package Importer | Import upstream version 1.4.0 |
|
||
|
src
|
1 | 17 years ago | Bazaar Package Importer | Import upstream version 1.4.0 |
|
||
|
tests
|
1 | 17 years ago | Bazaar Package Importer | Import upstream version 1.4.0 |
|
||
ABOUT-NLS |
1.1.4 | 16 years ago | Bazaar Package Importer | Import upstream version 2.0.1 | 77.7 KB |
|
|
|
aclocal.m4 |
1.1.4 | 16 years ago | Bazaar Package Importer | Import upstream version 2.0.1 | 258 KB |
|
|
|
AUTHORS |
1.1.4 | 16 years ago | Bazaar Package Importer | Import upstream version 2.0.1 | 26.5 KB |
|
|
|
ChangeLog |
1.1.5 | 16 years ago | Bazaar Package Importer | Import upstream version 2.0.4 | 861 KB |
|
|
|
config.h.in |
1.1.5 | 16 years ago | Bazaar Package Importer | Import upstream version 2.0.4 | 17.8 KB |
|
|
configure |
1.1.5 | 16 years ago | Bazaar Package Importer | Import upstream version 2.0.4 | 1.3 MB |
|
|
|
configure.in |
1.1.5 | 16 years ago | Bazaar Package Importer | Import upstream version 2.0.4 | 21.2 KB |
|
|
|
COPYING |
1 | 17 years ago | Bazaar Package Importer | Import upstream version 1.4.0 | 17.5 KB |
|
|
|
COPYING.LIB |
1 | 17 years ago | Bazaar Package Importer | Import upstream version 1.4.0 | 25.8 KB |
|
|
|
gtk-doc.make |
1 | 17 years ago | Bazaar Package Importer | Import upstream version 1.4.0 | 4.4 KB |
|
|
|
INSTALL |
1.1.2 | 17 years ago | Bazaar Package Importer | Import upstream version 1.6.2 | 9.1 KB |
|
|
|
Makefile.am |
1.1.5 | 16 years ago | Bazaar Package Importer | Import upstream version 2.0.4 | 2.1 KB |
|
|
|
Makefile.in |
1.1.5 | 16 years ago | Bazaar Package Importer | Import upstream version 2.0.4 | 32.4 KB |
|
|
|
NEWS |
1.1.5 | 16 years ago | Bazaar Package Importer | Import upstream version 2.0.4 | 105 KB |
|
|
|
README |
1 | 17 years ago | Bazaar Package Importer | Import upstream version 1.4.0 | 3.4 KB |
|
|
|
THANKS |
1.1.4 | 16 years ago | Bazaar Package Importer | Import upstream version 2.0.1 | 4.1 KB |
|
|