Bug#514807: Regression in libgnutls security update

Benoit Branciard Benoit.Branciard at univ-paris1.fr
Mon Feb 16 18:16:28 UTC 2009


"GTE CyberTrust Global Root", which we happen to use widely in our 
institution, also is a version *1* x509 certificate.

So the libgnutls13 update broke several of our apps.

A quick search among the files in "ca-certificates" package shows up to 
20 version-1 certificates over a total of 102.

This is about 20% now-untrusted trustworthy root certificates, how could 
one regard this as being a harmless routine security update ?



-- 
Ce message a ete verifie par MailScanner
pour des virus ou des polluriels et rien de
suspect n'a ete trouve.






More information about the Pkg-gnutls-maint mailing list