Fixing "lucky 13" CVE-2013-0169 in gnutls28

Andreas Metzler ametzler at downhill.at.eu.org
Sun Feb 24 10:58:43 UTC 2013


On 2013-02-24 Julien Cristau <jcristau at debian.org> wrote:
> On Sat, Feb 23, 2013 at 19:33:14 +0100, Andreas Metzler wrote:

>> Judging from the fact that 2.12.20 tarball does not include
>> largefile.m4 I guess the configure option is not necessary in 2.12.20.
>> - If you prefer to I can try without.
 
> So you're saying gnutls26 currently is built for 32bit off_t?

Let me doublecheck to be sure ...

No, I was mistaken. -  gnulib still automatically adds AC_SYS_LARGEFILE
in ./configure. - Checking for largefile.m4 was not the correct test.

cu andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'



More information about the Pkg-gnutls-maint mailing list