desktop-packages team mailing list archive
-
desktop-packages team
-
Mailing list archive
-
Message #104837
[Bug 1401069] Re: [SRU] New stable release 2.42.1
This bug was fixed in the package glib-networking - 2.42.1-0ubuntu1
---------------
glib-networking (2.42.1-0ubuntu1) utopic; urgency=medium
* New upstream release (LP: #1401069)
+ The GTlsClientConnection "use-ssl3" property now falls back to TLS
1.0 if SSL 3.0 has been disabled, rather than just failing. Also, we now
use the gnutls %LATEST_RECORD_VERSION option by default (to allow
connecting to certain servers that were incorrectly patched for the
POODLE attack), but also make sure to remove that option in the fallback
("use-ssl3") mode (to allow connecting to other servers that are
differently broken).
+ tls/gnutls: Miscellaneous warning, debugging, and leak fixes
* 0001-test_create_certificate_chain-Skip-if-not-running-ag.patch: Skip a
test when run on glib ≥ 2.43 as it requires a change in this version.
-- Iain Lane <iain@xxxxxxxxxxxxxxxxxxx> Wed, 10 Dec 2014 11:40:58 +0000
** Changed in: glib-networking (Ubuntu Utopic)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to glib-networking in Ubuntu.
https://bugs.launchpad.net/bugs/1401069
Title:
[SRU] New stable release 2.42.1
Status in glib-networking package in Ubuntu:
Fix Released
Status in glib-networking source package in Utopic:
Fix Released
Bug description:
[ Description ]
Upload this stable bugfix release
2.42.1
======
* The GTlsClientConnection "use-ssl3" property now falls back to TLS
1.0 if SSL 3.0 has been disabled, rather than just failing. Also,
we now use the gnutls %LATEST_RECORD_VERSION option by default (to
allow connecting to certain servers that were incorrectly patched
for the POODLE attack), but also make sure to remove that option
in the fallback ("use-ssl3") mode (to allow connecting to other
servers that are differently broken). (#738633, #740087, Dan
Winship)
* tls/gnutls: Miscellaneous warning, debugging, and leak fixes
(#736757, #736809, #737106, Philip Withnall)
* New/updated translations:
Kazakh
[ QA & regression potential ]
Under the GNOME MRE, assume the bugs are fixed. Installl the update &
use your system as normal. If we don't see any regressions either
manually or on errors, we're good.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/glib-networking/+bug/1401069/+subscriptions
References