Bug#865763: jessie-pu: package gnutls28/3.3.8-6+deb8u7

[Andreas Metzler]

Package: release.debian.org
Severity: normal
Tags: jessie
User: release.debian.org at packages.debian.org
Usertags: pu

Hello,

would like to fix the following issue in gnutls28/jessie (It was fixed
in 3.5.3 and therefore does not apply to stretch/buster/sid).

Quoting #865297:
------------
If the application closes open files during startup (e.g., a daemon),
it may close the file that gnutls has open for /dev/urandom. The
recommended way to handle this situation is to call
gnutls_global_init() again. This will check if the fd for /dev/urandom
is still valid and re-open it if not.

Unfortunately, the way that the /dev/urandom fd is checked is not
reliable. It only checks the mode, which might be the same if the
application reused the fd for another character device with the same
permissions (e.g., /dev/null).
------------

Thanks for considering, cu Andreas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: from_deb8u6_to_deb8u7.diff
Type: text/x-diff
Size: 3650 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20170624/0b813375/attachment.diff>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20170624/0b813375/attachment.sig>