[ubuntu/vivid-security] gnutls28 3.3.8-3ubuntu3.2 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Fri Jan 8 12:37:39 UTC 2016

gnutls28 (3.3.8-3ubuntu3.2) vivid-security; urgency=medium

  * SECURITY UPDATE: incorrect RSA+MD5 support with TLS 1.2
    - debian/patches/CVE-2015-7575.patch: properly set value in
      auth/cert.c, do not consider any values from the extension data to
      decide acceptable algorithms in lib/ext/signature.c, added test to
      tests/Makefile.am, tests/sign-md5-rep.c.
    - CVE-2015-7575

Date: 2016-01-07 16:39:25.841996+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
-------------- next part --------------
Sorry, changesfile not available.

More information about the Vivid-changes mailing list