[ubuntu/focal-security] gnutls28 3.6.13-2ubuntu1.3 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Wed Sep 9 10:57:55 UTC 2020


gnutls28 (3.6.13-2ubuntu1.3) focal-security; urgency=medium

  * SECURITY UPDATE: null pointer deref via no_renegotiation alert
    - debian/patches/CVE-2020-24659.patch: reject no_renegotiation alert if
      handshake is incomplete in lib/gnutls_int.h, lib/handshake.c.
    - CVE-2020-24659

gnutls28 (3.6.13-2ubuntu1.2) focal; urgency=medium

  * d/p/50_Update-session_ticket.c-to-add-support-for-zero-leng.patch
    Handle zero length session tickets, fixing connection errors on
    TLS1.2 sessions to some big hosting providers. (LP: #1876286)

Date: 2020-09-08 15:13:20.051637+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/gnutls28/3.6.13-2ubuntu1.3
-------------- next part --------------
Sorry, changesfile not available.


More information about the Focal-changes mailing list