← Back to branch summary

~ubuntu-branches/ubuntu/maverick/gnutls26/maverick-updates

« back to all changes in this revision

Viewing changes to lib/gnutls_cipher.c

  • Committer: Bazaar Package Importer
  • Author(s): Andreas Metzler
  • Date: 2009-08-14 19:14:29 UTC
  • mfrom: (1.1.7 upstream) (12.1.3 sid)
  • Revision ID: james.westby@ubuntu.com-20090814191429-6hovzz3oaqq101rm
Tags: 2.8.3-1
http://bugs.debian.org/540449
http://bugs.debian.org/541439
* New upstream version.
  + Stops hardcoding a hard dependency on the versions of gcrypt and tasn it
    was built against. Closes: #540449
  + Fixes CVE-2009-2730, a vulnerability related to NUL bytes in X.509
    certificate name fields. Closes: #541439        GNUTLS-SA-2009-4
    http://lists.gnu.org/archive/html/help-gnutls/2009-08/msg00011.html
* Drop 15_chainverify_expiredcert.diff, included upstream.
* Urgency high, since 541439 applies to testing, too.

Show diffs side-by-side

added added

removed removed

Lines of Context:
lib/gnutls_cipher.c
515
515
        {
516
516
          gnutls_assert ();
517
517
          _gnutls_record_log
518
 
            ("REC[%x]: Short record length %d > %d - %d (under attack?)\n",
 
518
            ("REC[%p]: Short record length %d > %d - %d (under attack?)\n",
519
519
             session, pad, ciphertext.size, hash_size);
520
520
          /* We do not fail here. We check below for the
521
521
           * the pad_failed. If zero means success.