Fixing "lucky 13" CVE-2013-0169 in gnutls28

Andreas Metzler ametzler at downhill.at.eu.org
Sun Mar 31 12:35:56 UTC 2013


On 2013-03-20 Andreas Metzler <ametzler at downhill.at.eu.org> wrote:
> On 2013-03-19 Andreas Metzler <ametzler at downhill.at.eu.org> wrote:
> [...]
> > Find attached a proposed patch. Its rather obvious downside is that it
> > will break on ports, due to using a negative list ("all except") where
> > possible and a positive list else:
> [...]

> Having slept over it I realize this is no problem at all. - Ports
> (which are not listed in the positive list) will simply build the
> guile but will not generate a guile-gnutls package containing these
> additional files.

Could you please remove gnutls28 3.0.22-3 from *unstable* to make it
possible to start testing the transition?

thanks, cu andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'



More information about the Pkg-gnutls-maint mailing list