Fixing "lucky 13" CVE-2013-0169 in gnutls28

Andreas Metzler ametzler at downhill.at.eu.org
Wed Mar 20 18:09:18 UTC 2013


On 2013-03-19 Andreas Metzler <ametzler at downhill.at.eu.org> wrote:
[...]
> Find attached a proposed patch. Its rather obvious downside is that it
> will break on ports, due to using a negative list ("all except") where
> possible and a positive list else:
[...]

Having slept over it I realize this is no problem at all. - Ports
(which are not listed in the positive list) will simply build the
guile but will not generate a guile-gnutls package containing these
additional files.

cu andreas



More information about the Pkg-gnutls-maint mailing list