~ubuntu-branches/ubuntu/quantal/curl/quantal-security

Viewing all changes in revision 68.

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2013-12-17 12:49:18 UTC
  • Revision ID: package-import@ubuntu.com-20131217124918-xkdaao300b9ymoxl
Tags: 7.27.0-1ubuntu1.7
* SECURITY UPDATE: missing CN verification when signature verification is
  disabled in GnuTLS backend.
  - debian/patches/CVE-2013-6422.patch: still verify host when
    CURLOPT_SSL_VERIFYPEER isn't set in lib/gtls.c.
  - CVE-2013-6422

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: