The bug seems still present in jessie today (mod-gnutls 0.5.10). I did not find a mention of reporting upstream so here it is done:
https://mod.gnutls.org/ticket/98 This is critical since it affects Tor hidden services, for instance (in that case, Apache sees all connections going through Tor at localhost) (The upstream ticket tracker is mostly full of spam so I wonder if the project is still alive.) -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org