-
Committer:
Package Import Robot
-
Author(s):
Marc Deslauriers
-
Date:
2013-11-29 08:34:48 UTC
-
mfrom:
(42.1.3 lucid-security)
-
Revision ID:
package-import@ubuntu.com-20131129083448-gh5i55lczvgwxaim
Tags: 7.19.7-1ubuntu1.4
* SECURITY UPDATE: missing CN verification when signature verification is
disabled.
- debian/patches/CVE-2013-4545.patch: still verify host when
CURLOPT_SSL_VERIFYPEER isn't set in lib/ssluse.c.
- CVE-2013-4545