liblwp-protocol-https-perl 6.04-2ubuntu0.1 source package in Ubuntu

Changelog

liblwp-protocol-https-perl (6.04-2ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: incorrect peer cert verification
    - debian/patches/746579-fix-peer-certificate-verification.patch: don't
      completely disable cert verification if only hostname verification is
      disabled in lib/LWP/Protocol/https.pm.
    - CVE-2014-3230
  * debian/patches/fix-https-proxy: updated to work with security fix.
  * debian/patches/cert.patch: refreshed
 -- Marc Deslauriers <email address hidden>   Fri, 27 Jun 2014 16:23:46 -0400

Upload details

Uploaded by:
Marc Deslauriers on 2014-06-27
Uploaded to:
Trusty
Original maintainer:
Ubuntu Developers
Component:
main
Architectures:
all
Section:
perl
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Trusty updates on 2014-07-17 main perl
Trusty security on 2014-07-17 main perl

Builds

Trusty: [FULLYBUILT] i386

Downloads

File Size MD5 Checksum
liblwp-protocol-https-perl_6.04.orig.tar.gz 3.9 KiB 1b422a7d3b5fed1eb4d748fdc9fd79a4
liblwp-protocol-https-perl_6.04-2ubuntu0.1.debian.tar.gz 7.6 KiB 6fa605a69c3b87902709f14ffa69951b
liblwp-protocol-https-perl_6.04-2ubuntu0.1.dsc 2.3 KiB 028f847a03fb36ccd2b25aea48909b91

View changes file

Binary packages built by this source

liblwp-protocol-https-perl: HTTPS driver for LWP::UserAgent

 The LWP::Protocol::https module provides support for using HTTPS schemed URLs
 with LWP. LWP::Protocol::https is a plug-in to the LWP protocol handling, so
 you don't use it directly. Once the module is installed LWP is able to access
 sites using HTTP over SSL/TLS.
 .
 If hostname verification is requested by LWP::UserAgent's ssl_opts, and
 neither SSL_ca_file nor SSL_ca_path is set, then SSL_ca_file is implied to be
 the one provided by ca-certificates.
 .
 This module used to be bundled with libwww-perl, but it was unbundled in
 v6.02 in order to be able to declare its dependencies properly for the CPAN
 tool-chain. Applications that need HTTPS support can just declare their
 dependency on LWP::Protocol::https and will no longer need to know what
 underlying modules to install.