Your message dated Fri, 21 Nov 2014 18:04:36 +0000
with message-id <[email protected]>
and subject line Bug#769904: fixed in gnutls28 3.3.8-5
has caused the Debian Bug report #769904,
regarding gnutls28: please disable SSLv3
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
769904: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769904
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: gnutls28
Version: 3.3.8-4
Severity: important
Tags: security
Hi,
Can SSLv3 be disabled in our GnuTLS build please?
As a reference, OpenSSL disabled this in jessie and sid:
https://packages.qa.debian.org/o/openssl/news/20141015T180434Z.html
It would be good for security and consistency if GnuTLS would also adopt this
approach and disable the legacy protocol in jessie and sid.
Cheers,
Thijs
--- End Message ---
--- Begin Message ---
Source: gnutls28
Source-Version: 3.3.8-5
We believe that the bug you reported is fixed in the latest version of
gnutls28, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Andreas Metzler <[email protected]> (supplier of updated gnutls28 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 20 Nov 2014 19:25:20 +0100
Source: gnutls28
Binary: libgnutls28-dev libgnutls-deb0-28 libgnutls28-dbg gnutls-bin gnutls-doc
guile-gnutls libgnutlsxx28 libgnutls-openssl27
Architecture: source i386 all
Version: 3.3.8-5
Distribution: unstable
Urgency: medium
Maintainer: Debian GnuTLS Maintainers <[email protected]>
Changed-By: Andreas Metzler <[email protected]>
Description:
gnutls-bin - GNU TLS library - commandline utilities
gnutls-doc - GNU TLS library - documentation and examples
guile-gnutls - GNU TLS library - GNU Guile bindings
libgnutls-deb0-28 - GNU TLS library - main runtime library
libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper
libgnutls28-dbg - GNU TLS library - debugger symbols
libgnutls28-dev - GNU TLS library - development files
libgnutlsxx28 - GNU TLS library - C++ runtime library
Closes: 769904
Changes:
gnutls28 (3.3.8-5) unstable; urgency=medium
.
* Remove SSL 3.0 from default priorities list.
Closes: #769904
Checksums-Sha1:
1e466c4409138c9999bc229d029e58394d0890ba 2913 gnutls28_3.3.8-5.dsc
0a1e85b539df7744b526ddc23682dda338db354b 88976 gnutls28_3.3.8-5.debian.tar.xz
41ecc7432d0c33d6f544b8181b4b80ed26459c5b 679378
libgnutls28-dev_3.3.8-5_i386.deb
2ebefe5ef78cc6d9dbd0a56ed60cead94f1f2579 709270
libgnutls-deb0-28_3.3.8-5_i386.deb
0479a3a9e0ce4db991e311a1b67a06c6be99fec7 1916030
libgnutls28-dbg_3.3.8-5_i386.deb
968790622f418109207cf4770fc097519c5b6bfc 309372 gnutls-bin_3.3.8-5_i386.deb
99d455d67b4d191327386df804b1a311aad01a3e 3626246 gnutls-doc_3.3.8-5_all.deb
d0d0bf3b9772a383bff3d9ec1f2a3ba59c7676c1 174426 guile-gnutls_3.3.8-5_i386.deb
9757dab1e2768035cf5145b726cdcd227f4b8363 15408 libgnutlsxx28_3.3.8-5_i386.deb
56be488aae77922461a9ce6d6343897d91fca023 141946
libgnutls-openssl27_3.3.8-5_i386.deb
Checksums-Sha256:
7fa2c156d3748f2eaad2cb1e3547413ae495ef643bd984c64c2cf2389d42f09c 2913
gnutls28_3.3.8-5.dsc
278af83e96e6a8f2d16456279b7a6c79438f00338e514ab6657d72cb127ef593 88976
gnutls28_3.3.8-5.debian.tar.xz
8d8495b01711cd87ded2ea83c0636fdf14da15a62d11847ca053565b802e3cec 679378
libgnutls28-dev_3.3.8-5_i386.deb
e2d685571b05f150ce62b96faf2a2aa9a7a49c9c393b76b367a4bb5a15f3184a 709270
libgnutls-deb0-28_3.3.8-5_i386.deb
39e059376c68a1f6bb64c2bc2d60e063cee386e83e56567b74c8a0c7058ea6fc 1916030
libgnutls28-dbg_3.3.8-5_i386.deb
628c7b777802ffb47265396a0c960653cfd536e0bbd3d7b8cbd4d8e601a83231 309372
gnutls-bin_3.3.8-5_i386.deb
174077c4664526861804e627eb335c4a4a2a9ded32954ecffb894937a80c3409 3626246
gnutls-doc_3.3.8-5_all.deb
b2f81edbdcbb0a6e871cfcf9835b87b1ea1cb02d44590fe1e467cb15905c061b 174426
guile-gnutls_3.3.8-5_i386.deb
73eb582464ab12c02d6ad8d8a0c00030d7d7e437a8ddeb79d7d09ba5cc150c16 15408
libgnutlsxx28_3.3.8-5_i386.deb
af2cc5cc76f03c88afa5461a726cf6d7c571ad06e53e1935a42547713f4df73f 141946
libgnutls-openssl27_3.3.8-5_i386.deb
Files:
8697fb619481852c53f5ebcd29c905d9 2913 libs optional gnutls28_3.3.8-5.dsc
92a1a38a01f11c87f0594f5dfe46cc5e 88976 libs optional
gnutls28_3.3.8-5.debian.tar.xz
57f924eda28371cc81e551b66d6ca6c9 679378 libdevel optional
libgnutls28-dev_3.3.8-5_i386.deb
98664f95fecf4d0f4d56119adb723898 709270 libs standard
libgnutls-deb0-28_3.3.8-5_i386.deb
6f137e8d1eea536a863edcbab1913c26 1916030 debug extra
libgnutls28-dbg_3.3.8-5_i386.deb
24e5defdb4e091d7cc6c546f8ea7b648 309372 net optional
gnutls-bin_3.3.8-5_i386.deb
9551b1d1539fe74e4231f89a5451fc75 3626246 doc optional
gnutls-doc_3.3.8-5_all.deb
ee8b49898cebc983877568cb6abba56d 174426 lisp optional
guile-gnutls_3.3.8-5_i386.deb
277581e03a57e5a321b0eb0b81bd764c 15408 libs extra
libgnutlsxx28_3.3.8-5_i386.deb
9ac6ed5e887d651b488fe70a04328571 141946 libs standard
libgnutls-openssl27_3.3.8-5_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIcBAEBCgAGBQJUb3x9AAoJEKVPAYVDghSE0D8QAJFKQ2qK3HYFyJ3JZqETqztW
DAym+JtSh9dk07zBAvOizrh+oroGrk6oDmVSMvPjbP1DcOJAGAFTPbBrRH1iamR7
tdacMXLOIKwWB6M3ZTlTlYDUxWXFAhUNVpNo+YYqVhvEd9cBnw673gAuyA+b/d8n
D56DHOcMUeoj8+iWquyMss79amjSRxsBL7kmv6vuB+mNyhN4bTsbfX0at8ovS5J2
s6x0eSaFMtmYI95KjY8JbSKYVmCyvFRTbVm9ub41YM10a/EpMHUOVUzHKSwChSOE
d/8mPZpXHQ/aOcPJMOgWH/sD3jq7O2xbP/14ILH/Y2B4F/7UPApPipwjSf1xzj35
AzEeMvfY974wA54tEzsT9+pMPe8uI5dySM5mdDiGA408zlaAWIgu2AgXsQQQCOcE
c07jAt7/zdRvxcrBZtqzQPMBObKD1f1AZo3BTHIUGHYggk+xQEFzwJH3jC/zYnut
SgyBGJwi3c16adONupT+RqZgEvABjH53E62Vhqflu+KS0e22uFk/HuPKZA5+BNgu
i/cSJlahRNMZx7ASQ+4r3XdXBI7yUxiE5Jj+H3NKYytuqIoDNGSzo6/iLCiDi3Ud
Sf419CsJAZ+Seg3HIp3arGhVwCE50qqAKX4hyCfDj+dFaDlxt6T6hk6ZF6RpDAov
yHQZ65WhhPbucTb2jNyG
=ncNW
-----END PGP SIGNATURE-----
--- End Message ---
