[ubuntu/vivid-updates] gnutls28 3.3.8-3ubuntu3.2 (Accepted)

Fri Jan 8 13:28:22 UTC 2016

gnutls28 (3.3.8-3ubuntu3.2) vivid-security; urgency=medium

  * SECURITY UPDATE: incorrect RSA+MD5 support with TLS 1.2
    - debian/patches/CVE-2015-7575.patch: properly set value in
      auth/cert.c, do not consider any values from the extension data to
      decide acceptable algorithms in lib/ext/signature.c, added test to
      tests/Makefile.am, tests/sign-md5-rep.c.
    - CVE-2015-7575

Date: 2016-01-07 16:39:25.841996+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/gnutls28/3.3.8-3ubuntu3.2
-------------- next part --------------
Sorry, changesfile not available.