Format: 1.8 Date: Fri, 27 Jun 2014 16:23:46 -0400 Source: liblwp-protocol-https-perl Binary: liblwp-protocol-https-perl Architecture: all Version: 6.04-2ubuntu0.1 Distribution: trusty Urgency: medium Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: liblwp-protocol-https-perl - HTTPS driver for LWP::UserAgent Changes: liblwp-protocol-https-perl (6.04-2ubuntu0.1) trusty-security; urgency=medium . * SECURITY UPDATE: incorrect peer cert verification - debian/patches/746579-fix-peer-certificate-verification.patch: don't completely disable cert verification if only hostname verification is disabled in lib/LWP/Protocol/https.pm. - CVE-2014-3230 * debian/patches/fix-https-proxy: updated to work with security fix. * debian/patches/cert.patch: refreshed Checksums-Sha1: 3b66c3d40c0af220e5e3f80ab2ed5d6601a6b3a8 7644 liblwp-protocol-https-perl_6.04-2ubuntu0.1_all.deb Checksums-Sha256: 5375fe2a5779ed3b457770ee11ab88ac9ff0e182c000b72cb35da17e597e1a10 7644 liblwp-protocol-https-perl_6.04-2ubuntu0.1_all.deb Files: 40ce2a59dd346d53651fd0882ae67da6 7644 perl optional liblwp-protocol-https-perl_6.04-2ubuntu0.1_all.deb Original-Maintainer: Debian Perl Group