Bug#789393: jessie-pu: package gnutls28/3.3.8-6+deb8u2

Adam D. Barratt adam at adam-barratt.org.uk
Sat Aug 15 13:40:42 UTC 2015


Control: tags -1 + confirmed

On Fri, 2015-08-14 at 18:43 +0200, Andreas Metzler wrote:
> Control: retitle -1 jessie-pu: package gnutls28/3.3.8-6+deb8u3
> 
> On 2015-08-12 Salvatore Bonaccorso <carnil at debian.org> wrote:
> > On Sat, Jun 20, 2015 at 04:03:48PM +0200, Andreas Metzler wrote:
> [...] 
> > > I would like two fix two issues in jessie:
> > > 
> > > #788704 VIA PadLock accelerated AES-CBC segfaults
> > > This pretty much breaks gnutls on VIA processors.
> > > 
> > > GNUTLS-SA-2015-2. This might allow MD5 signatures, although they are
> > > disabled by default. (Detailed info in the security tracker)
> 
> > Could you rebase this against 3.3.8-6+deb8u2 now available via
> > DSA-3334-1? I decided not to include the fix for GNUTLS-SA-2015-2
> > since there is as well the lynx-cur update via s-p-u required.
[...]
> find attached a new debdiff against the latest jessie security update.

Please go ahead; sorry for the delay.

Regards,

Adam




More information about the Pkg-gnutls-maint mailing list