[ubuntu/trusty-updates] liblwp-protocol-https-perl 6.04-2ubuntu0.1 (Accepted)

[Ubuntu Archive Robot]

liblwp-protocol-https-perl (6.04-2ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: incorrect peer cert verification
    - debian/patches/746579-fix-peer-certificate-verification.patch: don't
      completely disable cert verification if only hostname verification is
      disabled in lib/LWP/Protocol/https.pm.
    - CVE-2014-3230
  * debian/patches/fix-https-proxy: updated to work with security fix.
  * debian/patches/cert.patch: refreshed

Date: 2014-06-27 20:33:12.123113+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/trusty/+source/liblwp-protocol-https-perl/6.04-2ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.