Bug#706142: tpu (or pu): telepathy-idle/0.1.11-2+deb7u1

["Adam D. Barratt" <adam@adam-barratt.org.uk>]

Control: tags -1 + confirmed

On Thu, 2013-04-25 at 12:47 +0100, Simon McVittie wrote:
> The version of telepathy-idle in wheezy does not validate IRC servers'
> SSL certificates when used with SSL (#706094, CVE ID requested).
> 
> The version in sid was already newer than wheezy, so I uploaded the
> fixed upstream version there directly. For wheezy, I suggest a more minimal
> patch (attached) - this breaks a regression test which uses a pre-generated
> self-signed certificate, but we don't run those tests in Debian anyway.

+telepathy-idle (0.1.11-2+deb7u1) UNRELEASED; urgency=low
+
+  * Validate TLS certificates (Closes: #706094)
+
+ -- Simon McVittie <smcv@debian.org>  Wed, 24 Apr 2013 16:43:37 +0100

Please go ahead with an upload for stable.

Regards,

Adam