gnutls13 2.0.4-1ubuntu2.6 source package in Ubuntu
Changelog
gnutls13 (2.0.4-1ubuntu2.6) hardy-security; urgency=low
* SECURITY UPDATE: fix improper handling of '\0' in Common Name (CN) and
Subject Alternative Name (SAN) in X.509 certificates (LP: #413136)
- debian/patches/91_CVE-2009-2730.diff: verify length of CN and SAN
are what we expect and error out if either contains an embedded \0.
This fixed required updating _gnutls_hostname_compare() in
lib/x509/rfc2818_hostname.c to support wide wildcard hostname matching.
This is a backward compatible change and which only adds additional
matching of hostnames.
- CVE-2009-2730
-- Jamie Strandboge <email address hidden> Fri, 14 Aug 2009 14:57:08 -0500
Upload details
- Uploaded by:
- Jamie Strandboge
- Uploaded to:
- Hardy
- Original maintainer:
- Ubuntu Development Team
- Architectures:
- any
- Section:
- devel
- Urgency:
- Low Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| gnutls13_2.0.4.orig.tar.gz | 5.6 MiB | 2219182317e600c40775ae9a003f669cdcaee69cfcb679cbf64f10525b10f6ce |
| gnutls13_2.0.4-1ubuntu2.6.diff.gz | 31.0 KiB | c20746491c6b42400213ddde48033870b9444844bd4c1609ab1c6328977e4368 |
| gnutls13_2.0.4-1ubuntu2.6.dsc | 1.1 KiB | 7d6107ce783fcbbf10cc728cfc91945afb76543f7336529b132d0f50cc92d96a |
Available diffs
Binary packages built by this source
- gnutls-bin: No summary available for gnutls-bin in ubuntu hardy.
No description available for gnutls-bin in ubuntu hardy.
- gnutls-doc: No summary available for gnutls-doc in ubuntu hardy.
No description available for gnutls-doc in ubuntu hardy.
- libgnutls-dev: No summary available for libgnutls-dev in ubuntu hardy.
No description available for libgnutls-dev in ubuntu hardy.
- libgnutls13: No summary available for libgnutls13 in ubuntu hardy.
No description available for libgnutls13 in ubuntu hardy.
- libgnutls13-dbg: No summary available for libgnutls13-dbg in ubuntu hardy.
No description available for libgnutls13-dbg in ubuntu hardy.
- libgnutlsxx13: No summary available for libgnutlsxx13 in ubuntu hardy.
No description available for libgnutlsxx13 in ubuntu hardy.
