gnutls28 (3.3.8-3ubuntu3.2) vivid-security; urgency=medium
* SECURITY UPDATE: incorrect RSA+MD5 support with TLS 1.2
- debian/patches/CVE-2015-7575.patch: properly set value in
auth/cert.c, do not consider any values from the extension data to
decide acceptable algorithms in lib/ext/signature.c, added test to
tests/Makefile.am, tests/sign-md5-rep.c.
- CVE-2015-7575
Date: 2016-01-07 16:39:25.841996+00:00
Changed-By: Marc Deslauriers <[email protected]>
https://launchpad.net/ubuntu/+source/gnutls28/3.3.8-3ubuntu3.2
Sorry, changesfile not available.
--
Vivid-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/vivid-changes
