On Fri, Jan 10, 2014 at 1:43 PM, Lenz Weber <[email protected]> wrote:

> Thanks for the input,
> I found it:
> It's a bug that apparently was fixed somewhere between
> libgnutls26_2.12.14 (which the ubuntu deb is based on) and
> libgnutls26_2.12.23 (the latest release in the 2.12 branch).
>

Please report the issue to the ubuntu package maintainers.

The newer version takes 1.5 seconds, acually using ~80% cpu, which looks
> promising.
> Is the 2.12 branch still safe to use?
>

No, it is no longer supported (by me at least, I guess ubuntu have their own
support). However if you really need to stick with 2.12.23 make sure you
apply
the fix at:
http://www.gnutls.org/security.html#GNUTLS-SA-2013-2

regards,
Nikos
_______________________________________________
Gnutls-help mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gnutls-help

Reply via email to