Fixing "lucky 13" CVE-2013-0169 in gnutls28

Julien Cristau jcristau at debian.org
Sun Apr 14 18:26:24 UTC 2013


On Sun, Apr 14, 2013 at 18:38:56 +0200, Andreas Metzler wrote:

> On 2013-03-31 Julien Cristau <jcristau at debian.org> wrote:
> > On Sun, Mar 31, 2013 at 14:35:56 +0200, Andreas Metzler wrote:
> > > Could you please remove gnutls28 3.0.22-3 from *unstable* to make it
> > > possible to start testing the transition?
>  
> > We don't handle unstable.  You'll have to file a bug against
> > ftp.debian.org for that.
> 
> Hello,
> 
> We have managed to do without removal from unstable by using a
> slightly different faked version number. Letting gnutls26 propagate to
> testing and removing gnutls28 should now be possible.
> 
> unblock gnutls26/2.12.20-6
> RM: gnutls28/3.0.20-3
> 
Thanks.  Hints added.

Cheers,
Julien
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20130414/af77b2ba/attachment.pgp>


More information about the Pkg-gnutls-maint mailing list