Processed: Re: Bug#735422: LWP::UserAgent: strange behavior of CA cert paths

Wed May 14 07:54:14 UTC 2014

Processing control commands:

> retitle -1 LWP::UserAgent: strange behavior of CA cert paths with liblwp-protocol-https-perl 6.04-2 (CVE-2014-3230)
Bug #735422 [libwww-perl] LWP::UserAgent: strange behavior of CA cert paths
Changed Bug title to 'LWP::UserAgent: strange behavior of CA cert paths with liblwp-protocol-https-perl 6.04-2 (CVE-2014-3230)' from 'LWP::UserAgent: strange behavior of CA cert paths'
> reassign -1 liblwp-protocol-https-perl
Bug #735422 [libwww-perl] LWP::UserAgent: strange behavior of CA cert paths with liblwp-protocol-https-perl 6.04-2 (CVE-2014-3230)
Bug reassigned from package 'libwww-perl' to 'liblwp-protocol-https-perl'.
No longer marked as found in versions libwww-perl/6.05-2.
Ignoring request to alter fixed versions of bug #735422 to the same values previously set
> forcemerge 746579 735422
Bug #746579 {Done: Salvatore Bonaccorso <carnil at debian.org>} [liblwp-protocol-https-perl] liblwp-protocol-https-perl: CVE-2014-3230: HTTPS_CA_DIR or HTTPS_CA_FILE disables peer certificate verification for IO::Socket::SSL
Bug #735422 [liblwp-protocol-https-perl] LWP::UserAgent: strange behavior of CA cert paths with liblwp-protocol-https-perl 6.04-2 (CVE-2014-3230)
Severity set to 'serious' from 'normal'
Marked Bug as done
Added indication that 735422 affects libwww-perl
Marked as fixed in versions liblwp-protocol-https-perl/6.04-3.
Marked as found in versions liblwp-protocol-https-perl/6.04-1.
Added tag(s) confirmed and security.
Merged 735422 746579

-- 
735422: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=735422
746579: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746579
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems