← Back to branch summary

~ubuntu-branches/ubuntu/maverick/gnutls26/maverick-security

« back to all changes in this revision

Viewing changes to lib/gnutls-api.texi

  • Committer: Bazaar Package Importer
  • Author(s): Andreas Metzler
  • Date: 2009-04-30 19:00:21 UTC
  • mfrom: (1.1.6 upstream) (12.1.1 squeeze)
  • Revision ID: james.westby@ubuntu.com-20090430190021-kjagrqik7888nksh
Tags: 2.6.6-1
* use @LTLIBTASN1@ instead of @LIBTASN1@ in Libs.private of *.pc.in. This
  way lib-link.m4 gives us -ltasn1 instead of /usr/lib/libtasn1.so.
* New upstream security release.
  + libgnutls: Corrected double free on signature verification failure.
    GNUTLS-SA-2009-1 CVE-2009-1415
  + libgnutls: Fix DSA key generation. Noticed when investigating the
    previous GNUTLS-SA-2009-1 problem. All DSA keys generated using GnuTLS
    2.6.x are corrupt.  See the advisory for more details.
    GNUTLS-SA-2009-2 CVE-2009-1416
  + libgnutls: Check expiration/activation time on untrusted certificates.
    Before the library did not check activation/expiration times on
    certificates, and was documented as not doing so.
    GNUTLS-SA-2009-3 CVE-2009-1417
 * The former two issues only apply to gnutls 2.6.x. The latter is a
   brehavior change, add a NEWS.Debian file to document it.

Show diffs side-by-side

added added

removed removed

Lines of Context:
lib/gnutls-api.texi
1657
1657
This function will return the peer's certificate expiration time.
1658
1658
 
1659
1659
@strong{Returns:} (time_t)-1 on error.
 
1660
 
 
1661
@strong{Deprecated:} @code{gnutls_certificate_verify_peers2()} now verifies expiration times.
1660
1662
@end deftypefun
1661
1663
 
1662
1664
@subheading gnutls_certificate_activation_time_peers
1668
1670
This is the creation time for openpgp keys.
1669
1671
 
1670
1672
@strong{Returns:} (time_t)-1 on error.
 
1673
 
 
1674
@strong{Deprecated:} @code{gnutls_certificate_verify_peers2()} now verifies activation times.
1671
1675
@end deftypefun
1672
1676
 
1673
1677
@subheading gnutls_sign_callback_set