Control: tags -1 + confirmed On Thu, 2013-04-25 at 12:47 +0100, Simon McVittie wrote: > The version of telepathy-idle in wheezy does not validate IRC servers' > SSL certificates when used with SSL (#706094, CVE ID requested). > > The version in sid was already newer than wheezy, so I uploaded the > fixed upstream version there directly. For wheezy, I suggest a more minimal > patch (attached) - this breaks a regression test which uses a pre-generated > self-signed certificate, but we don't run those tests in Debian anyway.
+telepathy-idle (0.1.11-2+deb7u1) UNRELEASED; urgency=low + + * Validate TLS certificates (Closes: #706094) + + -- Simon McVittie <s...@debian.org> Wed, 24 Apr 2013 16:43:37 +0100 Please go ahead with an upload for stable. Regards, Adam -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/1368291486.7990.41.ca...@jacala.jungle.funky-badger.org
