Bug#789393: jessie-pu: package gnutls28/3.3.8-6+deb8u2
Hi Andreas, hi Stable Release managers,
On Sat, Jun 20, 2015 at 04:03:48PM +0200, Andreas Metzler wrote:
> Package: release.debian.org
> Severity: normal
> Tags: jessie
> User: release.debian.org@packages.debian.org
> Usertags: pu
>
> Hello,
>
> I would like two fix two issues in jessie:
>
> #788704 VIA PadLock accelerated AES-CBC segfaults
> This pretty much breaks gnutls on VIA processors.
>
> GNUTLS-SA-2015-2. This might allow MD5 signatures, although they are
> disabled by default. (Detailed info in the security tracker)
Could you rebase this against 3.3.8-6+deb8u2 now available via
DSA-3334-1? I decided not to include the fix for GNUTLS-SA-2015-2
since there is as well the lynx-cur update via s-p-u required.
Regards,
Salvatore
Reply to: