Viewing all changes in revision 71.
- Committer: Package Import Robot
- Date: 2013-12-17 12:47:31 UTC
- Revision ID: package-import@ubuntu.com-20131217124731-rbdsv38wf3s9sktb
* SECURITY UPDATE: missing CN verification when signature verification is
disabled in GnuTLS backend.
- debian/patches/CVE-2013-6422.patch: still verify host when
CURLOPT_SSL_VERIFYPEER isn't set in lib/gtls.c.
- CVE-2013-6422
disabled in GnuTLS backend.
- debian/patches/CVE-2013-6422.patch: still verify host when
CURLOPT_SSL_VERIFYPEER isn't set in lib/gtls.c.
- CVE-2013-6422
- files added:
- .pc/CVE-2013-6422.patch
- .pc/CVE-2013-6422.patch/lib
- files modified:
- .pc/applied-patches
expand all
collapse all
added
removed
