Bug#782776: CVE-2015-3308

2015-04-27 Thread Andreas Metzler
On 2015-04-18 Andreas Metzler wrote: > On 2015-04-17 Moritz Muehlenhoff wrote: > > Hi Andreas, > > this was assigned CVE-2015-3308: [..] > > This doesn't seem severe, could you fix this in the first > > jessie point release? > Hello, > I will push an upload to unstable to get some free testing

Bug#782776: CVE-2015-3308

2015-04-18 Thread Salvatore Bonaccorso
Hi Andreas, On Sat, Apr 18, 2015 at 07:22:46PM +0200, Andreas Metzler wrote: > On 2015-04-17 Moritz Muehlenhoff wrote: > > Hi Andreas, > > this was assigned CVE-2015-3308: > > http://www.openwall.com/lists/oss-security/2015/04/15/6 > > > gnutls in wheezy or squeeze should not be affected, the

Bug#782776: CVE-2015-3308

2015-04-18 Thread Andreas Metzler
On 2015-04-17 Moritz Muehlenhoff wrote: > Hi Andreas, > this was assigned CVE-2015-3308: > http://www.openwall.com/lists/oss-security/2015/04/15/6 > gnutls in wheezy or squeeze should not be affected, the > code was introduced in 3.3 (please double-check). > This doesn't seem severe, could you

Bug#782776: CVE-2015-3308

2015-04-17 Thread Moritz Muehlenhoff
Source: gnutls28 Severity: important Tags: security Hi Andreas, this was assigned CVE-2015-3308: http://www.openwall.com/lists/oss-security/2015/04/15/6 gnutls in wheezy or squeeze should not be affected, the code was introduced in 3.3 (please double-check). This doesn't seem severe, could you