Bug#537633: libio-socket-ssl-perl: incorrect validation of hostnames

gregor herrmann gregoa at debian.org
Mon Jul 20 08:52:40 UTC 2009


forcemerge 535946 537633
thanks

On Sun, 19 Jul 2009 19:59:57 -0400, Michael S. Gilbert wrote:

> a security issue has been fixed in the latest upstream version of
> libio-socket-ssl-perl [0].  see patch [1].  please coordinate with the
> security team to prepare updates for the stable releases.  thank you.

Already reported as 535946, and Dominic has already contaced to
security team and prepared a package. I'm merging the two bugs now.

Cheers,
gregor
-- 
 .''`.   http://info.comodo.priv.at/ -- GPG Key IDs: 0x00F3CFE4, 0x8649AA06
 : :' :  Debian GNU/Linux user, admin, & developer - http://www.debian.org/
 `. `'   Member of VIBE!AT, SPI Inc., fellow of FSFE | http://got.to/quote/
   `-    BOFH excuse #125:  we just switched to Sprint. 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-perl-maintainers/attachments/20090720/591fd575/attachment.pgp>


More information about the pkg-perl-maintainers mailing list