Bug#929907: implications for libgnutls-openssl27?

2019-06-17 Thread Andreas Metzler
On 2019-06-16 Ross Boylan wrote: [...] > So it sounds as if I should wait til gnutls30 3.6.7-4 appears before > doing the upgrade. Or maybe the security problem is serious enough to > warrant an upgrade now? TLS is likely to matter to me only as a > client. Hello Ross, this choice a noop, 3.6.

Bug#929907: implications for libgnutls-openssl27?

2019-06-16 Thread Ross Boylan
See below. On Sat, Jun 15, 2019 at 9:42 PM Andreas Metzler wrote: > > On 2019-06-15 Ross Boylan wrote: > > I've been following this bug because it came up as an issue for a > > security upgrade to libgnutls-openssl27 in buster. I'm still seeing > > 3.6.7-3 as the upgrade target. > > Hello Ross,

Bug#929907: implications for libgnutls-openssl27?

2019-06-15 Thread Andreas Metzler
On 2019-06-15 Ross Boylan wrote: > I've been following this bug because it came up as an issue for a > security upgrade to libgnutls-openssl27 in buster. I'm still seeing > 3.6.7-3 as the upgrade target. Hello Ross, I do not know whether this bug applies to packages using GnuTLS via the openssl

Bug#929907: implications for libgnutls-openssl27?

2019-06-15 Thread Ross Boylan
I've been following this bug because it came up as an issue for a security upgrade to libgnutls-openssl27 in buster. I'm still seeing 3.6.7-3 as the upgrade target. Will an openssl27 variant be coming? Or perhaps this problem never applied to -openssl27 and apt-listbugs just got over-eager? I c