Your message dated Fri, 06 Nov 2015 16:24:29 +0000
with message-id <[email protected]>
and subject line Bug#803974: fixed in libnet-tclink-perl 3.4.0-8
has caused the Debian Bug report #803974,
regarding libnet-tclink-perl: FTBFS: Uses SSLv3_client_method
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
803974: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=803974
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: libnet-tclink-perl
Version: 3.4.0-7
Severity: serious

Hi,

Your package does this in tclink.c:
                c->meth = SSLv3_client_method();

Please call SSLv23_client_method() instead. The SSLv3_* methods
only supports SSLv3 while the SSLv23_* is the only that supports
multiple versions.

The SSLv3_* methods have now been removed in unstable.

SSLv3 is no longer considered secure and you should stop using it.
SSLv3 support has been disabled in jessie when using the SSLv23_*
methods but you could still use it using the SSLv3_* methods.

I suggest you fix this in all releaes.


Kurt

--- End Message ---
--- Begin Message ---
Source: libnet-tclink-perl
Source-Version: 3.4.0-8

We believe that the bug you reported is fixed in the latest version of
libnet-tclink-perl, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
gregor herrmann <[email protected]> (supplier of updated libnet-tclink-perl 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 06 Nov 2015 16:39:49 +0100
Source: libnet-tclink-perl
Binary: libnet-tclink-perl
Architecture: source
Version: 3.4.0-8
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <[email protected]>
Changed-By: gregor herrmann <[email protected]>
Closes: 803974
Description: 
 libnet-tclink-perl - Perl interface to the TrustCommerce payment gateway
Changes:
 libnet-tclink-perl (3.4.0-8) unstable; urgency=medium
 .
   * Team upload.
   * Rename autopkgtest configuration file(s) as per new pkg-perl-
     autopkgtest schema.
   * Add patch no-SSLv3.patch to use SSLv23_client_method() instead of the
     insecure and removed SSLv3_client_method().
     Thanks to Kurt Roeckx for the bug report. (Closes: #803974)
Checksums-Sha1: 
 149b20c97b5afe6f9ae0a9fa4d2574d984298643 2245 libnet-tclink-perl_3.4.0-8.dsc
 8d9c58918d8844421900681e8f8911c66711aed8 4000 
libnet-tclink-perl_3.4.0-8.debian.tar.xz
Checksums-Sha256: 
 7c4ec6a08a356a3e4c44caaeaf6b249d5864fcff4d37f3f6d9d903ee682e5cbd 2245 
libnet-tclink-perl_3.4.0-8.dsc
 b2acd02eae169f253c5a1b224c6723c64722591906b3d767e1de8354b71a15b0 4000 
libnet-tclink-perl_3.4.0-8.debian.tar.xz
Files: 
 109351e8b5d54d67b11057fd6807418f 2245 perl optional 
libnet-tclink-perl_3.4.0-8.dsc
 e7f6ffe3d647a3bf854dc64524678c91 4000 perl optional 
libnet-tclink-perl_3.4.0-8.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQJ8BAEBCgBmBQJWPMouXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXREMUUxMzE2RTkzQTc2MEE4MTA0RDg1RkFC
QjNBNjgwMTg2NDlBQTA2AAoJELs6aAGGSaoGLtEQAMKDBlbT3bQIj1SI4atTDAdH
fDQ3mB77VwYUiTNf0kNDTW5lZRPzlGTwYqhq3KzcWUYxMmqtOr6MntN5itIF4rU0
S3cI3ijP5zm6aAocieMl5ZIP1BZldOyFpdpe1VBzZQgRMnJRov2tyAiIBTaT1w+r
pJVWjfXDxRh7FG+dwN7fqNes8AXPH/JgpWx8bU/E2BKjge74kSRmkJwF/tbsfc0/
6dfpBNkzUIJrlLhUWBoqyKkmcCTNwvsfeOKP8z0Qmo474HJwjfgrQMKCDy9J26wV
GafKeLLEff/K79vsBwNZEuuB19srGwXgWRvA2pomlvdpa/W4IuAS+1OUeAfdJkxA
g4BwqqPZODJzkGXgCODcg0z+ipejz2v9gucDqdFeVOuyZ422Jfus2xdH8TVZqqyE
QkbYGnO5Nt1m+YaV5ip49g3V3CUDuHRfhzZ1o/mWjuqqL+L1rBxpzTPQzeXeaUsB
A+Veteoow8Ya0sf/uOOkCbXYvrI+wAgZ2gsjpsYmVUVzng3vQhhBdXpNJQB4Xf/l
9n+3/1/Ap3eq2FV+HgtBkXra+t6Mj+hqM52+eYgunBP7wdgaRUcHkmLCc/2vEIP6
oYNeI2P2zFvGAAx6XR37zLKpryaMxz3wFg2GTPzjoh0jn/CuOzWp0KEkPA6JcbbW
lxuldLYcFR3Nw7woFxTI
=byK7
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to