This is the mail archive of the cygwin-apps mailing list for the Cygwin project.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]
Other format:	[Raw text]

Re: SECURITY: gnutls

From: "Dr. Volker Zell" <dr dot volker dot zell at oracle dot com>
To: cygwin-apps at cygwin dot com
Date: Tue, 18 Oct 2011 19:01:10 +0200
Subject: Re: SECURITY: gnutls
References: <1318790948.7624.14.camel@YAAKOV04> <CAGHJv4e_LUHRVkM6_UZMfuTeM=7-xVKm_twRyXjAGt3yz+n_zw@mail.gmail.com>

>>>>> Chris Sutcliffe writes:

    > On 16 October 2011 14:49, Yaakov (Cygwin/X) wrote:
    >> Dr. Volker Zell,
    >> 
    >> gnutls 2.8.6 is susceptible to CVE-2009-3555. ?This has been fixed since
    >> 2.10.0, but the current stable releases are 2.12.11 (ABI-compatible with
    >> 2.8.6) and 3.0.4 (which breaks ABI compatibility). ?For now, please
    >> release 2.12.11 ASAP for all the apps currently dependent on
    >> libgnutls26.

    > Is Dr. Volker Zell still active?  The last post I can find from him
    > was from June of last year:

    > http://sourceware.org/ml/cygwin/2010-06/msg00009.html

I'm about to upload...but libtasn1 first.
    
    > Chris

Ciao
  Volker

References:
- SECURITY: gnutls
  - From: Yaakov (Cygwin/X)
- Re: SECURITY: gnutls
  - From: Chris Sutcliffe

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]