liblwp-protocol-https-perl 6.04-2ubuntu0.1 source package in Ubuntu
liblwp-protocol-https-perl (6.04-2ubuntu0.1) trusty-security; urgency=medium * SECURITY UPDATE: incorrect peer cert verification - debian/patches/746579-fix-peer-certificate-verification.patch: don't completely disable cert verification if only hostname verification is disabled in lib/LWP/Protocol/https.pm. - CVE-2014-3230 * debian/patches/fix-https-proxy: updated to work with security fix. * debian/patches/cert.patch: refreshed -- Marc Deslauriers <email address hidden> Fri, 27 Jun 2014 16:23:46 -0400
Binary packages built by this source
- liblwp-protocol-https-perl: HTTPS driver for LWP::UserAgent
:https module provides support for using HTTPS schemed URLs
with LWP. LWP::Protocol:
:https is a plug-in to the LWP protocol handling, so
you don't use it directly. Once the module is installed LWP is able to access
sites using HTTP over SSL/TLS.
If hostname verification is requested by LWP::UserAgent's ssl_opts, and
neither SSL_ca_file nor SSL_ca_path is set, then SSL_ca_file is implied to be
the one provided by ca-certificates.
This module used to be bundled with libwww-perl, but it was unbundled in
v6.02 in order to be able to declare its dependencies properly for the CPAN
tool-chain. Applications that need HTTPS support can just declare their
dependency on LWP::Protocol:
:https and will no longer need to know what
underlying modules to install.