-
Committer:
Bazaar Package Importer
-
Author(s):
Mathias Gug
-
Date:
2008-05-14 00:01:48 UTC
-
Revision ID:
james.westby@ubuntu.com-20080514000148-hypmyj22tjfpet01
Tags: 1.0.14-0ubuntu2.1
* SECURITY UPDATE: replace known vulnerable weak keys and certificates
caused by Debian openssl bug.
* debian/control: Depends on openssl (0.9.8g-4ubuntu3.1),
openssl-blacklist.
* debian/templates: add critical debconf note.
* debian/postinst: regenerate snakeoil key and certificate on upgrade if
vulnerable.
* References
CVE-2008-0166
http://www.ubuntu.com/usn/usn-612-4