touch-packages team mailing list archive

[Bryan Quigley <bryan.quigley@xxxxxxxxxxxxx>]

** Information type changed from Public to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to gnutls26 in Ubuntu.
https://bugs.launchpad.net/bugs/1510163

Title:
  Poodle TLS1.0 issue in Trusty (and Precise)

Status in gnutls26 package in Ubuntu:
  New

Bug description:
  This issue is present in Trusty and Precise with the stock main gnutls
  - https://community.qualys.com/blogs/securitylabs/2014/12/08/poodle-
  bites-tls

  If I switch cups to use gnutls28-dev on 14.04 the issue appears to go
  away according to ssllabs.   My test case is cups with SSL on.

  [1] http://pastebin.ubuntu.com/12970857/

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/1510163/+subscriptions