[ubuntu/precise-security] serf 1.0.0-2ubuntu0.1 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Thu Aug 14 17:29:07 UTC 2014


serf (1.0.0-2ubuntu0.1) precise-security; urgency=medium

  * SECURITY UPDATE: cert spoofing via NUL characters in CommonName and
    SubjectAltNames
    - debian/patches/CVE-2014-3504.patch: escape null bytes in
      buckets/ssl_buckets.c.
    - CVE-2014-3504

Date: 2014-08-14 15:49:18.422957+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/precise/+source/serf/1.0.0-2ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the Precise-changes mailing list